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PREFACE 


This study on Advanced Missions Safety has been performed as Task 2. 6 of 
Contract NASw-2301, entitled, "Advanced Space Program Analysis and 
Planning." The task consisted of three subtasks. 

Subtask 1 - Space Shuttle Rescue Capability 

Subtask 2 - Experiment Safety 

Subtask 3 - Emergency Crew Transfer 

Each subtask is an entity not related to or dependent upon any activity under 

either of the other two subtasks. 

The results of Task 2. 6 are presented in three volumes. 

Volume I ; Executive Summary Report presents a brief, con- 

cise review of results and summarizes the princi- 
pal conclusions and recommendations for all three 
subtasks. 

Volume II: Technical Discussion is in three parts, each pro- 

viding a comprehensive discussion of a single 
subtask. 

Part 1 provides an assessment of Earth Orbit 
Shuttle (EOS) capability to perform a rescue mis- 
sion. It treats several concepts for augmenting 
this capability and increasing EOS rescue mission 
utility. 

Part 2 presents an analysis of potential hazards 
introduced when experimental equipment is carried 
aboard the EOS. It identifies safety guidelines and 
requirements for eliminating or reducing these 
hazards. 


Part 3 discusses the applicability and utility of 
various means of emergency crew transfer between 
a disabled and a rescuing vehicle. 

Volume III: Appendices is in two parts, each devoted to an 

individual subtask. Part 1 contains detailed sup- 
porting analysis and backup material for Subtask 1, 
and Part 2 contains similar material for Subtask 2. 
Volume III is of interest primarily to the technical 
specialist. 

Since the reader is not necessarily interested in all three subtasks, each 
part of Volumes II and III is a separate document. 

All calculations were made using the customary system of units, and the data 
are presented on that basis. Values in the International System of Units (SI) 
are also given. Data taken from reference sources are presented in the sys- 
tem of units employed in the original reference. 

The Advanced Missions Safety Task was sponsored by NASA Headquarters 
and managed by the Advanced Missions Office of the Office of Manned Space 
Flight. Mr. Herbert Schaefer, the study monitor, provided guidance and 
counsel that significantly aided the effort. Mr. Charles W. Childs of the 
Safety Office, NASA Headquarters, and Miss Ruth W eltmann of the Aerospace 
Safety Research and Data Institute, NASA-Lewis, also provided valuable con- 
tributions by reviewing the Experiment Safety Study results and making posi- 
tive suggestions for improving the visibility of the results. 
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SUMMARY OVERVIEW 


In contrast to safety considerations in experiment ground facilities, which 
emphasize experimenter safety first, an experiment laboratory in space has 
to give prime safety considerations to the operational functioning of the 
Orbiter to enable a safe crew return. 

In ground facilities, hazardous experiments are separated from other experi- 
ments and personnel. For space operations, experiment equipment of a 
hazardous nature may be densely packed, because flight costs are high. For 
this reason special attention has to be given to potential interferences and 
interactions such as overheating, permeating fields, spurious signals, high- 
voltage potential, etc. Such interaction between experiments could lead to a 
malfunction of otherwise safe equipment and might influence the safe operation 
of the Orbiter. ' ... 

Many hazardous materials on board the Orbiter, such as cryogenics, storable 
propellants, etc., will add to the hazards of some of the experiments and the 
crew. The location of such materials in relation to any experiment or 
Orbiter equipment, as well as the access and egress routes for the experi- 
menters, requires serious consideration. 

In contrast to most ground laboratories, the Orbiter structure outside the 
crew compartment can withstand a pressure difference of only a few psi. 
Therefore, experiments with components of a potential high pressure or 
explosive source have to be constrained, shielded, or safed to prevent inad- 
vertant activation by other experiments. 

Toxic and hazardous materials (especially in gaseous or powder form), which 
present a health hazard to men or which can damage materials or equipment, 
may have to be double -contained with special environmental conditioning 
systems, as complete cleanup of contaminants in zero gravity might be 
impossible to achieve. 
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Venting of effluents into space, even in small amounts, will create a thrust 
that has to be counteracted if the Experiment Module or the Orbiter are to 
remain in a given orbit and prevented from tumbling. Thus, effluent outlets 
should be designed and located so that any undesired thrust is compensated 
by a counteracting thrust. If this cannot be achieved in an emergency, suf- 
ficient Orbiter thrust should be available to keep the Orbiter on course, even 
if all effluent has to be vented by emergency relief in one direction. Similar 
considerations apply also to the case of rotating equipment producing reaction 
torques. 

Many of the experiments being considered for shirtsleeve operation will re- 
quire venting of one or more fluids because they are conducted in an artificial 
environment that has to be maintained for crew life support. Different fluid 
lines require prominent marking, ready accessibility for repair, and arrange 
ment to permit convenient access or egress. All fluid lines require markings 
and connectors that are unique to any one fluid. 

Many of the experiments being considered have high-voltage components with 
the potential of fire, shock, etc. which could result in injury to the crew and 
damage to the Orbiter. The clear indication of the operational status of such 
components is required. In case of emergency, provisions for automatic 
shut-down and rapid discharge after shutdown are required. Ground circuits 
should be avoided. 

Emergency situations resulting from experiment equipment and/or its opera- 
tion that could lead to Orbiter damage and/or loss require immediate assess- 
ment by the Orbiter crew. This can be accomplished by providing warning 
signals in the crew compartment which indicate the hazard, its severity, its 
location, etc. Normal procedures provide the commander with the authority 
to determine actions necessary to save the Orbiter and crew. This may in- 
volve sacrificing an experiment, an Experiment Module, and perhaps even a 
crew member, if the emergency warrants such drastic means and the Orbiter 
and most of the crew can be saved by such an action. 
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Radiation sources, such as radioisotopes. X-rays, lasers, etc., which can 
cause injury to men and damage to materials, equipment, experiments, and 
the operation of the Orbiter, should be clearly marked, monitored, shielded, 
and located so that no interference is possible under normal operating con- 
ditions. Emergency procedures and plans should be prepared and executed 
if an emergency or malfunction is indicated by the monitoring system. 

In ground facilities the safety plan for any complex experiment usually iden- 
tifies start-up, operating, and normal and emergency shutdown procedures. 
For the case of an Orbiter, where a number of experiments might be operated 
simultaneously, safety procedures should consider not only single experi- 
ments but also the interactions of all experiments to be operated at any one 
time. A certain shutdown procedure might be safe for one experiment but 
might create an emergency situation in another experiment, thus endangering 
the Orbiter and crew. Such procedures might indicate, for example, that if 
an emergency occurs in experiment A, experiment B has to be shut down prior 
to taking action on experiment A. In another situation the Orbiter may be re- 
quired to make a certain maneuver before shutdown action can be taken on 
either experiment, in order to ensure the safety of the Orbiter. 

In the case of hazardous experiment equipment such as lasers and X-rays, 
there should be a trade-off study made to determine whether the experiment 
should be conducted within or exterior to the Experiment Module or Orbiter. 

If located within the Experiment Module, the experimenter can closely super- 
vise the experiment operations and ensure compliance with all safety pro- 
cedures. If located exterior to the Module or Orbiter, docking or EVA may 
be required. Such operations also have safety implications, such as collisions 
and EVA hazards. 
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i. INTRODUCTION 


1. 1 BACKGROUND 

A major NASA objective is to utilize manned space flight capability for the 
benefit of our nation and mankind. To further this objective, a number of 
experiment programs have been defined. These experiments are described 
in the "Reference Earth Orbital Research and Applications Investigations" 
(Blue Book), Ref. 1. This broad-based experiment program definition 
encompasses the disciplines of astronomy, physics, earth observations, 
communications /navigation, materials science and manufacturing, technol- 
ogy, and the life sciences. 

Present plans place complete dependence on the Space Shuttle for transport- 
ing such scientific and application payloads into space and returning them 
(where appropriate) from earth orbit. Additionally, the Orbiter element of 
the Shuttle is required to deploy and retrieve payloads in some instances; in 
other cases the Orbiter functions as a primary base of operations for an 
attached experiment payload. In all cases the nature of the experiment pay- 
loads and their potential for introducing or precipitating hazards which 
endanger the safety of experimenters and/or the Orbiter and its crew are 
of obvious interest. Therefore, this study was undertaken to investigate 
the safety aspects of in- space experiments performed in connection with 
the Space Shuttle. 

1. 2 STUDY OBJECTIVES 

The objectives of the study were: 

a. Analyze the potential emergency situations created by carrying 
experiment equipment aboard a Space Shuttle. 

b. Identify safety guidelines and requirements for eliminating or 
reducing hazards to the Space Shuttle and its crew which may 
be introduced by the experiment equipment and its operations. 
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STUDY SCOPE 


1 . 3 

The safety analysis considered all mission phases from the launch pad 
through to deployment, free flight (where applicable), experiment operations, 
retrieval, and final disposition. Also considered were the interactions of the 
experiment equipment and experiment operations with Experiment Modules 
(Pallet, MSM, RAM, Sortie Module, etc. ) and the Space Shuttle, other pay- 
loads within the Orbiter cargo bay, and associated satellites. 
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2. EXPERIMENT AND HARDWARE DEFINITION 


2. 1 EXPERIMENT EQUIPMENT AND SUPPORT REQUIREMENTS 

A brief review of the literature indicated that a comprehensive identification 
of basic candidate experiments and experiment equipment being considered as 
payloads for the Space Shuttle was contained in the Blue Book, Ref. 1. Supple- 
mentary experiment and hardware data, more specifically related to Space 
Shuttle applicability (and extending to automated satellite payload compatibility), 
was treated extensively in the SOAR study. Ref. 2. These two reference 
sources, then, were utilized to provide baseline definitions of experiment 
equipment and support requirements for the present safety analysis. 

2.1.1 Blue Book Definitions 

The 15 January 1971 edition of "Reference Earth Orbital Research and 
Applications Investigations" (Blue Book) provides the latest definition of 
experiment requirements data for continuing NASA Space Station, Space 
Shuttle, and Research Application Module (RAM) definition activities. 

The Blue Book describes experiment requirements for seven scientific 
disciplines and functional program elements (FPEs) within each discipline, 
where appropriate. An FPE is a grouping of experiments, experiment 
classes, or research activities characterized by being mutually supportive 
of a particular discipline of research or investigation or by imposing similar 
and related demands on the support systems. 

Tables 2-1 through 2-4 (from Ref. 1) summarize the Blue Book experiment 
requirements. Table 2-1 summarizes the requirements for each FPE except 
for Fluid Management and EVA, which cannot be summarized at the FPE level 
due to either the complex and diverse nature of the facility requirements or 
the uniqueness of each experiment set-up or operation. Summary data for 
these two FPEs are presented in Table 2-3 (for Fluid Management) and 
Table 2-4 (for EYA). Table 2-2 lists required crew skills and their code 
numbers as used in Table 2-1. 
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Specific experiment equipment, support equipment, and materials used in the 
conduct of the experiments are delineated in Section 3. 

2.1.2 SOAR Study Definitions 

Task 1 of the SOAR study {Ref. 2) had three basic elements: to assimilate 
Shuttle payload data, to assess payload compatibility with Space Shuttle mis- 
sion capabilities, and to select a representative payload set for detailed re- 
quirements and accommodation analyses. 

Candidate orbital experiment definition in terms of functional program ele- 
ments (FPEs) is related to a facility or laboratory approach to orbital re- 
search. In order to provide smaller packages affording greater flexibility 
for short -duration Shuttle application missions, the 25 FPEs in the Blue Book 
were divided into 56 sub-FPEs, or payload elements. An example of how one 
of the FPE concepts, the Space Physics Research Laboratory, was expanded 
into five payload elements is shown in Table 2-5 {from Ref. 2). The resulting 
56 payload elements and their relationships to the 25 FPEs in the Blue Book 
are shown in Table 2-6 (from Ref. 2). These 5 6 payload elements plus two 
indivisible FPEs (A-l and A-6) comprised the payload data base for Shuttle 
orbital research in the SOAR study. 

The second major class of Shuttle applications considered in the SOAR study 
was the delivery, service, and retrieval of automated spacecraft. This in- 
cluded operations with two types of spacecraft: operations related to free- 
flying research and applications modules (RAMs) and conventional automated 
orbital satellites and interplanetary spacecraft. Eight free -flying RAMs were 
identified from the Blue Book (Table 2-7 from Ref. 2) and, as such, generally 
include a pressurized or pre s surizable compartment within which crewmen 
service the spacecraft at prescribed intervals, whereas conventional automated 
spacecraft do not offer this facility. 

The NASA Payload Fleet Analysis report (Ref. 3) tabulates the characteristics 
of 73 automated spacecraft potentially ready for flight in the 1977 to 1990 time 
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period. Of this number, four automated spacecraft (see Figure 2-1 from 
Ref. 2) were chosen for the SOAR representative payload set to characterize 
critical mission, design, and interface requirements on the Shuttle system; 


they were also considered representative of the requirements envelope of the 
full candidate spacecraft payload set. 


Details concerning experiment equipment, support equipment, and materials 
used in the conduct of the experiments or associated with the accommodation 
of the automated spacecraft are delineated in Section 3. 


2. 2 ORBIT ER ACCOMMODATION MODES 

2. 2. 1 Blue Book 


As outlined in the Blue Book, experiment modules containing laboratory 
facilities will operate either attached to a Space Station, attached to a Shuttle 
(Shuttle -sortie mode), or will be free -flying, depending on experiment require- 
ments such as pointing, stabilization, g-level, etc. In this regard, the follow- 



ing material is abstracted from the Blue Book (Ref. 


1 ). 


"A possible mode for accommodating experiment programs 
prior to or in lieu of the operational availability of a space 
station exists with the concept of using the Earth -to -Orbit 
Space Shuttle as a short term orbital base for conducting 
experiments. This concept evolves around the use of the 
Shuttle and minimum additional support equipment to carry 
aloft research equipment and, where appropriate, scientists 
and technicians, to conduct experiments during relatively 
short stay times in low earth orbit. In cases where man is 
not directly required for experiment operation, such as most 
astronomy observations, the concept includes leaving the 
equipment in orbit to accomplish the program with periodic 
servicing by subsequent Shuttle flights. 

"The primary operating modes envisioned for Shuttle - sortie 
operations, depicted in Figure 2-2, are as follows: 

a. Modes where man is directly involved in the conduct of 
the experiment program. In these cases the research equip- 
ment is carried aloft in the Shuttle along with the necessary 
support equipment such as crew quarters, life support, and 
data management provisions. In the attached modes the ex- 
periments are conducted during the Shuttle stay time on orbit 
of perhaps 5 to 30 days. The experiments would be conducted 
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Figure 2-2. Shuttle-Based Experiment Operations (Ref. 1) 




either extended from the Shuttle payload bay, as shown, or 
possibly from within the bay. The assembly is returned to 
earth after completion of the 5- to 30 -day experiment program. 

In the detached mode, the experiment equipment and crew are 
placed in orbit by the Shuttle and retrieved after 30 to 45 days 
by another Shuttle. 

Two potential configurations for accommodating the crew and 
support equipment are shown in Figure 2-3. In Figure 2 -3a, 
a separate support module is attached to the experiment module. 
In Figure 2 -3b, the crew and support equipment are contained 
within the experiment module. Studies currently being conducted 
by NASA are evaluating these methods of implementation. 

b. Modes where man is required only for periodic logistics, 
maintenance, update, or retrieval of the experiment and is not 
directly involved in conducting the experiment program. In 
these cases the experiment equipment is carried aloft by the 
Shuttle, normally without an experiment crew, for unmanned 
automated experiment operations. Two basic operating modes 
are considered likely: 

1. The experiment equipment is placed in orbit from a 
Shuttle to commence experiment operations; the Shuttle returns 
to earth and periodically visits the experiment equipment on 
subsequent flights for logistics and servicing. This mode is 
pictured in Figure 2 -3c, which shows the servicing operation 
with an astronomy module. 

2. The experiment equipment is self-contained and 
automated and needs only delivery to the proper orbit to 
accomplish the experiment program while remaining attached 
to the Shuttle, after which it is returned to the ground. This 
concept is depicted in Figure 2 -3d. All normal servicing of 
experiment equipment would be accomplished on the ground 
to avoid the EVA required in the unpre s surizable payload bay. 

"It is likely that variations of the above basic modes will be 
developed to meet the needs of particular experiment programs. 
The concept includes consideration for operations or orbital 
altitudes and inclinations other than that of the Space Station 
orbit, which may be particularly beneficial to the experiment 
program, or where payload weights dictate use of a lower 
energy orbit. 

"Those experiment operations which can be conducted in the 
Shuttle -sortie mode will be affected by the characteristics and 
capabilities of the Space Shuttle system, particularly those of 
the Shuttle Orbiter. A few 'examples of these characteristics 
which must be considered are listed below. In many of these 



Free-Flying 
Experiment Module 
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cases, limitations of the Orbiter capabilities can be overcome 
or supplemented by support equipment carried as payload, as 
depicted earlier. 

a. Shuttle pilots will have limited, if any, time to conduct or 
participate in experiment operations. Any significant degree 
of man participation will necessitate carrying an experiment 
crew as payload. 

b. Shuttle systems will have limited, if any, capability to provide 
power, data, crew EC/LS or other support to experiment opera- 
tions, necessitating that these items also be provided by systems 
carried as part of the payload. 

c. Nominal stay time on orbit is 5 days. However, it is likely 
that it will be possible to extend this to 30 days by carrying as 
payload all the required expendables and supplies. 

d. The Orbiter pointing accuracy and stability will fall short 

of the requirements of some experiments, and must be provided 
by the support equipment carried as payload. " 

2. 2. 2 SOAR Study 

The general emphasis of the SOAR study was on early time frame Space 
Shuttle missions that were relatively austere compared to initial Shuttle 
mission concepts. This led to the definition of two general mission classes 
comprised of three basic system design options (presented in Figure 2-4 from 
Ref. 2). The first mission class is entitled, "Sortie", and encompasses the 
conduct of man-supported orbital research with the Space Shuttle Orbiter, 

The design options consist of either a pallet upon which experiment equipment 
is mounted, or a mission support module (MSM) within which research is con- 
ducted in a pressurized environment by man. In the event that the control of 
pallet-mounted equipment from within the Orbiter is undesirable or impractical 
because of operational or physical considerations, an MSM can be used as 
shown in the figure. Similarly, if the physical or crew limitations of an early 
capability MSM are excessive for accomplishing certain advanced research, an 
MSM extension module is feasible and so indicated. This could be a dedicated 
experiment module, operating attached to the Orbiter/MSM. Alternatively, 
the MSM extension module might be a nondedicated reconfigurable module in 
which multiple or large experiment payloads could be operated or additional 
crewmen could be accommodated. 
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Figure 2-4. SOAR/Shuttle Mission Classes (Ref. 2) 



The second Shuttle mission class relates to the delivery, service, and 
retrieval of free -flying RAMs and conventional automated spacecraft. The 
payload may include an attached propulsive stage for orbital transfer after 
Shuttle delivery to low earth orbit. The design option associated with this 
mission class allows for including an MSM with the spacecraft payload, if it 
is required for status displays, deployment, and retrieval controls, or service 
kits. 

2. 2. 3 Present Study Assumptions ... 

For purposes of the present safety analysis, three basic or generic modes of 
Experiment Module accommodation by the Orbiter were selected to encompass 
the various options suggested in the Blue Book and the SOAR study. These 
three modes and their Blue Book and SOAR counterparts are summarized in 
Figure 2-5. 

The first, or Pallet, mode is restricted to the case where all active experi- 
ment equipment is mounted in or on an Experiment Module which remains 
attached to the Orbiter and has no provisions for pressurization or volume to 
permit man's participation for operation or on-orbit servicing. Therefore, 
in this mode the experiment crew as well as associated displays and control 
equipment must be installed in the Orbiter. 

The second, or attached MSM, mode encompasses all cases where a pres- 
surized mission support module, which remains attached to the Orbiter, is 
included to permit man's direct participation in experiment operations. The 
actual Experiment Equipment may be partially or totally contained within or 
attached to the Experiment Module proper. In this mode, then, the Experi- 
ment Module is required to furnish life support functions for the experiment 
crew during the period(s) they are within the Module. 

The third, or detached RAM, mode encompasses all cases where the Experi- 
ment Module is detached from the Orbiter to accomplish its function. This 
mode, then, includes both free -flying RAMs per se (manned or unmanned), 
and automated spacecraft. 
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Figure 2-5. Shuttle -Based Accommodation Modes 












generic experiment categories 


2. 3 

The large number of potentially applicable experiment payload elements 
(56 sub-FPEs, two indivisible FPEs, eight free-flying RAMs, and 73 auto- 
mated spacecraft), plus their diverse requirements with regard to design, 
subsystems, destination, handling, installation, and deployment (see Tables 
2-1 through 2-4), were reduced to generic experiment categories of interest 
from a safety point of view, in order to facilitate the initial analysis efforts. 

The SOAR study included a comprehensive assessment, extending to the 
detailed sub-FPE level, of payload compatibility with Orbiter mission capa- 
bilities. Table 2-8 (from Ref. 2) presents a summary of the subgroups 
recommended in the SOAR study as candidates for accommodation in a limited 
MSM, an MSM extension module, a Pallet, or a RAM. 

With this baseline definition of subgroup accommodation compatibility, the 
various subgroups were combined into generic Experiment Modules according 
to scientific discipline ( FPE type) and associated applicable generic mode of 
accommodation (Pallet, attached MSM, or detached RAM, as denoted in 
section 2.2.3 and Figure 2-5). The resulting group of selected generic ex- 
periment categories is shown in Figure 2-6. 

By this 'technique. Experiment Modules of each scientific discipline are 
identifed as to potentially meaningful configurational modes (i. e.. Pallet, 
MSM, RAM) and as to the spectrum of FPE subgroups which may be incor- 
porated within each configurational or accommodation mode. 

It should be noted that the SOAR study did not specifically treat the life 
science experiments related to vertebrates (LS-2), plants (LS-3), cells and 
tissues (LS-4), invertebrates (LS-5), life support and protective systems , 
(LS-6), and manned system integration (LS-7) due to the short mission 
duration considered in the SOAR study. For purposes of completeness, they 
have been incorporated in the present study, in both the MSM and RAM 
accommodation categories. 
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ORBIT ER /EXPERIMENT MODULE INTERFACES 


2. 4 

The principal interfaces between the Experiment Module and the Orbiter 
include not only the physical means for mounting and manipulating the Module 
but also the provisions for and extent of utilities or other support services 
provided to the Module by the Orbiter. The following assumptions were made 
in this study for the purpose of the safety analysis. 

2. 4. 1 Module Mounting 

It was assumed that the mounting provisions included in the Orbiter cargo 
bay would: 

a. be adequate to provide secure holding and protection against 
excessive shock, vibration, and. thermal loads from the Orbiter 
to the Module during all mission phases from ground installation 
to removal after flight 

b. afford a clear egress path from the Orbiter crew compartment 
to the Module via a hatch and tunnel between the crew compart- 
ment and the Orbiter cargo bay 

2. 4. 2 Module Manipulation 

It was assumed that manipulator mechanisms would be provided in the Orbiter 
cargo bay (in conjunction with mounting provisions) to accomplish any neces- 
sary erections and retractions of the Module. In the case of MSM or RAM 
configurations, the access tunnel connection between the Orbiter crew com- 
partment and the Module would remain operative throughout the erection/ 
retraction process. 

2. 4. 3 Module Utilitie s /Support 

2. 4. 3.1 Electrical Power 

It was assumed that an active electrical power interface existed between the 
Orbiter and Module. On this basis the Orbiter could furnish all or only a 
small part of the electrical power required by the Module. 
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2. 4. 3. 2 Life Support/Crew Systems 


It was assumed that the Orbiter provided all necessary crew systems and life 
support for the experiment crew except when the crew was in an MSM or RAM 
Module. During these periods the Module (MSM or RAM) was assumed to 
provide any necessary crew systems and life support. 

2. 4. 3. 3 Thermal Control 

It was assumed that thermal control of the Module and its subsystems would 
be accomplished with an Orbiter /Module shared fluid -radiator loop. 

2. 4. 3, 4 Guidance, Navigation, and Control 

It was assumed that Shuttle GN&C system and thrusters would provide at least 
coarse control for all Modules while attached to the Orbiter. Where the 
Orbiter pointing accuracy and stability are inadequate for the nature of a 
given experiment, the Module would contain the necessary sensors and control 
features to accomplish the fine pointing. 

Detached RAM Modules would contain integral GN&tC systems appropriate for 
their mission purposes. 

2. 4. 3. 5 Controls and Displays 

It was assumed that all controls and displays necessary for the conduct of a 
given Experiment would be contained within the Module, except in the case of 
a Pallet configuration where such controls would necessarily be located within 
the Orbiter crew compartment proper. 

In all cases it was assumed that any controls and displays associated with 
caution and warning systems would be duplicated in the Orbiter crew com- 
partment to the extent necessary to provide for preventive or remedial actions 
on the part of the Orbiter or its crew. 

2. 4. 3. 6 Data Management 

It was assumed that all experiment data management systems would be con- 
tained within the Module, except in the case of a Pallet configuration where 
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some parts of the system might necessarily be located in the Orbiter for 
access by the experiment crew. Data would be transmitted to the ground for 
processing by either the Module or the Orbiter, as required by the nature 
of the Experiment carried. 

2. 4. 3. 7 Checkout System 

All checkout systems, whether associated with subsystems aboard the Module 
or with automated satellites, would be located within the Module. Any fault - 
detection signals would be appropriately displayed in the Orbiter crew 
compartment. 

2. 4. 3. 8 Voice Communication 

It was assumed that voice communication links would be provided: 

a. between the Orbiter control station and each manned 
habitable compartment of the Module 

b. between manned habitable compartments of the Module 
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3. HAZARD ANALYSIS 


3. 1 GENERAL 


A hazard analysis was performed to identify and assess the emergency-causing 
potential of the various Experiments and their associated equipment; this 
included hazardous interactions arising from interfaces with the Orbiter as well 
as interfaces between Experiment Equipment and other payloads likely to be 
simultaneously carried. 

This analysis activity was keyed to: 


a. identifying potential sources of basic hazards, in terms of 
Experiment Equipment characteristics or operations attendant 
to operation of the equipment or performing the Experiment 

b. identifying those causative events/factors/conditions which 
could arise from or combine with a basic hazard source to 
produce a hazardous result 

c. delineating potentially hazardous results arising from the 
occurrence of the forcing function (causative event/factor/ 
condition) 

d. summarizing the spectrum of potential emergency situations 
which could arise from implementing experiment programs 
in concert with the Space Shuttle Orbiter 


3.2 EXPERIMENT MODULES 


3.2.1 Hazard Source Identification 


Each of the generic Experiment Modules selected in section 2.3 (see 
Figure 2-6) was examined in detail as to the basic types of Experiment Equip- 
ment likely to be employed, possible support requirements in terms of both 
additional equipment and operational needs, expected operating power levels, 
and nominal GSE and facility utility requirements for installation purposes. 
The primary source for this level of definition was the sub-FPE descriptive 
material contained in the SOAR study (Ref. 4). 
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Figure 3-1 illustrates the type of information provided by this examination 
effort, in this example, for the Astronomy Module configured in the Attached 
MSM mode. Similar information for each of the 20 generic experiment cate- 
gory modules selected for examination (from Figure 2-6) are contained in 
Tables 3-1 through 3-20. 

Each generic module class was then examined to determine what particular 
equipment (experiment or support), related materials, or operations associ- 
ated with it might be a hazard source because of inherent characteristics. 
Figure 3-2 illustrates typical results, again for the Astronomy Module con- 
figured in the Attached MSM mode. Similar information for all 20 generic 
Experiment Module categories are contained in Tables 3-21 through 3-31. 

Finally, all resulting hazard sources from all generic Experiment Modules 
were consolidated to facilitate the hazards analysis by means of a single 
source listing. Figure 3-3 delineates the 26 resulting hazard sources associ- 
ated with equipment or related contents, and Figure 3-4 delineates the eight 
hazard source areas associated with operations related to Orbiter /Experiment 
missions . 

3.2.2 Hazard Analysis 

With the foregoing definition of hazard source areas (Figures 3-3 and 3-4), 
each source area, or combination thereof (where pertinent), was analyzed to 
determine plausible causations leading to potentially hazardous situations. 

In some cases the causation was attributed to a "condition" resulting naturally 
from the inherent characteristics of Experiment Equipment, associated mate- 
rials, or necessary operating conditions. For example, in this category 
would be "abnormal combustion" (or combustion instability) as a causative 
condition leading to fire or explosive propellant mixtures from an experiment 
combustor. 
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Equipment Related Operations 
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Figure 3-2. Potential Hazard Sources - Astronomy Module, Attached MSM Mode 







00 

-*-» 

C 

«5 

r*H 

ft 

to 

■M 

u 

03 

03 

C 


aJ 

£ 


CO 

T3 

*H 

G 

I— I 

ft 


tO 

<o 

DO 
<0 
O 

o o 


^ c 

^ 0) 

m to qo 
non 


o C £ 

•r-i m H 

M fcoO 
O O i 

o >* c 

• H ^ O 

« u 2; 


<0 

o 

V« 

3 

o 

CO 

c 

o 

fH 

•M 

(TJ 

C 

- iH 

s 

HJ 


c 

o 


c 
a) 

O 

£T.2 « 

to «« 


p. .... 

iso 

O 6 & 

2 ft co 


TJ 

03 

4-> 

cti 

r~H 

a> 

Oj 

i 

c 

4) 

e, 

Si 

w 


c 



(0 

to 

o 

vi 

d 

o 

co 

<0 

^ «» 

5 £ 

« S 

n « 
03 £> 
04^ 

£ u 

4> tt 

H o 

• -2 
J3 h 
w> « 

*»H ►> 

EC O 


to 

Vi 

<U 

43 


to 

+J 

<0 

C 

00 

a) 

to 
A! 
00 O 

C O 


o 

jjj 'O 

C 


U 

i 

X 

u 

n) 

O, 


Oh tH 

3 O 


c 

10 

£ 

Oh 


(0 

to 

0 

C 

10 

+j 

n 

< 

(0 

£ 

Vi 

O 


CO CO co 


(0 3 
•' h to m 
n W <o j? 

«> oo 2^ 

03 u to 

w 2 to c 
i a 03 * 
n -m i— i O 
3 O (0 O 
CO Ol E-t CQ 


to 

o 

Vi 

G 

o 

CO 

(0 

u 

G 

to 

00 

to 

Vi 

ft 


_ft 
D £ 

c- 

Z jj 

c o 

oo^ 
.5 a, 
44 

V 

o 

£ 


<0 ^ 
00 4J 

(0 to 

2: C 


4-> CO 
>+H Oi 

(0 M 

Vi -n 
O > 
<0 10 
O Q 
<0 

Ph*S 

co S 

TO 

Vi n 

O 


nJ 

Vi 

4) n M 

o,ft 

O _ 
<u n 


CO 

<0 

.1 


CO 

•H 

"O 
4) 'o (0 
H CO ffj 


c 

4) 

£ 

Oh 

•H 
0 
o' 

W 

X) 

G 

(0 

CO to to 

2 . 2 .2 
h V V 
4> 

C -M U 

M (]} 

fti ttJ r-H 

O CQ ft 


0 

to 

£ 

Oh 

*rH 

G 

cr 

ft 

T3 

(0 

U 

<0 

* 

0 
ft 

1 


45 


Figure 3-3. Hazard Sources Related to Equipment, Contents 
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Figure 3-4. Hazard Sources Related to Operations 



In other cases the causation was attributed to a "factor," not related to the 
particular Experiment Equipment characteristics, whose presence or occur- 
rence combined with the equipment characteristics to produce a hazardous 
condition. For example, in this category would be "mere proximity" of crew 
or sensitive equipment to permeating-field devices (e.g., RF-fields, mag- 
netic fields). 

In still other cases the causation was attributed to an "event" whose occur- 
rence was necessary, in addition to Experiment Equipment characteristics, 
to produce a hazardous condition. Typical of this category would be eye 
damage caused by inadvertently "looking" at the sun or at reflected sunlight 
through an optical telescope, or burns resulting from "touching" of "handling" 
hot surfaces. 

Emphasis was placed on "causation" determination (as outlined above) not only 
to assess meaningful hazardous results (and their requirements for effective 
remedial actions), but also to provide the framework for later preventive 
measure assessments of means for eliminating or reducing the hazards intro- 
duced by the Experiment Equipment and its operation (as reported in Section 4). 

The results of the hazard analysis performed in this manner are summarized 
in Tables 3-32 and 3-33. Table 3-32 is a summary of hazard source, causa- 
tion, and interaction results for the equipment/ contents - related hazard 
sources of Figure 3-3. Table 3-33 is a similar summary for the operations- 
related hazard sources of Figure 3-4. 

In a previous study (Ref. 5) relating to hazards associated with manned space- 
craft in general, it was determined that 12 hazard/emergency groups were 
sufficiently generic to meaningfully encompass all space-related hazards/ 
emergencies. For purposes of comparison, correlation, and insight, the 
experiment-related hazard sources identified in the present study (Tables 3-32 
and 3-33) were tested against this 12-group generic classification for com- 
pliance and/or for the identification of new hazards. The resultant groupings 
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are shown in Table 3-34. As can be seen, the 12-group generic hazard/ 
emergency classes were sufficient to encompass all of the specific experi- 
ment hazard sources identified in the present study; i.e., the utilization of 
such Experiment Equipment or operations do not in and of themselves pose 
hazards or emergencies that are different from those previously determined. 
The tabulations of Table 3-34 do serve, however, to illustrate and emphasize 
the extremely broad range of specific hazard sources (equipment and/or their 
related operations and interfaces) which potentially exist for Space Shuttle 
missions associated with in- space experiments of the types described in the 
Blue Book (Ref. 1). 


3.3 ORBITER 

3.3.1 Hazards and Emergency Situations 


Hazards and emergency situations onboard spacecraft of the general config- 
uration of the Orbiter were previously examined in Ref. 5. The results of 
Ref. 5 pertaining to Orbiter hazards and general emergency situations (result- 
ing from the occurrence of a hazard) were adopted in the present study after 
a brief confirmatory review. Figures 3-5 and 3-6 summarize the resultant 
hazards and emergency situations. 


3.3.2 Effects of Experiment Modules 

The effect of incorporating Experiment Modules as Orbiter payloads is to 
increase the number of potential sources of hazards because of the wide 
spectrum of Experiment Equipment they contain, the involvement of man in 
many experiment operations, and the many interfaces between Experiment 
Equipment, the Experiment Modules, and the Orbiter. Although the basic 
potential hazards which might be encountered are not increased, the source 
listing is very extensive (see Table 3-34). 


Another significant effect is that an MSM or RAM Experiment Module repre- 
sents a separate compartment or spacecraft (with respect to the Orbiter), 
which poses additional problems and/or requirements with regard to egress 
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Figure 3-5. Orbiter Hazards 



o 


Ill/Injured Crew (Physical, Chemical, Disease, Mental) 
o Metabolic Deprivation 

o Stranded /Entrapped Crew 
/ During EVA Operations 
/ In Vehicle 

o Inability to Communicate 
o Out-Qf-Control Spacecraft 
/ Tumbling in Safe Orbit 

/ Decaying Orbit 

/ Unsafe Trajectory 
o Debris in Vicinity 

o Radiation in Vicinity 

o Non-Habi table Environment in Spacecraft 

/ Lack of Environmental Control (Temp., Humidity 
Extremes) 

/ Contamination (Experiments , Animals, Bacteria, 
Insects) 

/ Radiation (Internal) 
o Abandonment (Crew in EVA After Bailout) 

o Inability to Reenter 


Figure 3-6. Summary of Orbiter Emergency Situations 



(escape) and remedial aid (rescue) if emergencies should occur within the 
Module which require Orbiter -generated assistance. A typical example of 
the potential interactions between hazard sources, an MSM or RAM module, 
and the Orbiter is indicated in Figure 3-7 for an Astronomy Module configured 
in the attached MSM mode. (Similar illustrations for other Experiment Mod- 
ules and modes are given in Tables 3-21 to 3-31.) As can be noted, the gen- 
eral effects on the Module and/or Orbiter, in terms of condition (emergency 
situation) or requirement (remedial need) fall into well recognized categories. 
It is evident from the figure that many Experiments contain inherent hazard 
sources (and their potential hazardous interactions) which can result in an 
emergency. 

3.4 SUMMARY OF POTENTIAL EMERGENCY SITUATIONS 

Tables 3-35 through 3-39 summarize the potential emergency situations 
which may exist for the Orbiter and Experiment Module (Pallet, attached 
MSM, detached RAM) during the pre-launch, ascent, on-orbit, return, and 
post-flight phases of a mission. These tables serve to highlight the nature 
of potential emergencies associated with the Orbiter or Module and the 
mission phases during which they could occur. 

As can be noted, contamination of an Experiment Module or the Orbiter can 
occur during any mission phase. 

Illness or injury are of concern aboard the Orbiter during all mission phases, 
and the Orbiter can become non-habitable at any time due to loss of EC/LS 
supply, temperature or humidity control, etc. The same applies to an MSM 
or RAM, but only during the on-orbit phase while crewmen are within. 

Crew entrapment (in an airlock or module) is of importance during the on-orbit 
phase where egress activities are planned. It is also of concern during the 
return and post-flight phases, if a crew member has been entrapped. 

EVA stranding , by its very nature, is limited to the on-orbit phase. 
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Figure 3-7. Hazards /Interactions (On-Orbit Phase) - Astronomy Modules, 
Attached MSM Mode 



Inability to reenter the earth's atmosphere is restricted to the Orbiter and 
the on-orbit phase. 

Metabolic deprivation and inability to communicate can occur at any time 
for crew members in the Orbiter, whereas crew members in the MSM or 
RAM would be affected only during the on-orbit phase. 

Out -of -control (tumbling, unsafe trajectory) would be a condition of concern 
to the Orbiter during ascent, on-orbit, and return phases, and to the RAM 
during the on-orbit phase. 

Abandonment (by means of EVA) is limited to the Orbiter and RAM during 
the on-orbit phase. 

Debris in the vicinity and radiation in the vicinity are associated primarily 
with the on-orbit phase of operation. 
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4. PREVENTIVE MEASURE ASSESSMENT 


4.1 HAZARD ELIMINATION/ AVOIDANCE 

As delineated in Section 3, a very broad spectrum of potential hazard sources 
is introduced when conducting in- space experiment programs in concert with 
the Space Shuttle. In order to identify possible means for eliminating hazard 
sources and avoiding their occurrence, a series of preventive measure assess- 
ments were performed. These assessments were based on the inherent hazard 
source lists (Figure 3-3 and 3-4) and were keyed to the causative events/ 
factors/conditions as described in Tables 3-32 and 3-33. 

The approach followed in the assessment was to graphically display and relate 
a basic hazard source and its attendant causations (events, factors, conditions) 
to a subjective analysis, and the assessment of meaningful measures which 
could potentially: 

a. prevent a hazardous condition from occurring 

b. avoid undertaking a particular potentially hazards event or act 

c. separate non-experiment- related factors from association with 
the experiment process 

Three broad basic areas were selected to provide the framework and focus for 
the investigative analysis: 

a. Design features 

b. Locational features 

c. Operational techniques 

Measures in these areas, whose implementation could either eliminate or 
avoid a hazard, or alleviate the results of its occurrence, were then identified. 

The above techniques are illustrated in Figure 4-1 for the case of laser 
equipment and related operations. In the case illustrated it can be seen 
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Figure 4-1. Precautionary Measure Assessment - Lasers 




that six measures were identified in the design features area, three measures 
in the locational features area, and two measures with regard to operational 
techniques. 

For the total hazard source spectrum so analyzed, a total of 23 general mea- 
sures pertaining to design features, six measures related to locational fea- 
tures, and 10 measures related to operational techniques were identified. 
Figure 4-2 summarizes these 3 9 measures, or potential means which should 
be considered for eliminating or avoiding experiment-related hazards. 

The formulation of methods of implementing or using such preventive mea- 
sures is presented in Section 5 in terms of statements which express the 
measure and relate it to the pertinent or example experiment equipments 
and/or operations to which each preventive measure could apply. 
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5. PREVENTIVE MEASURE STATEMENTS 


The following preventive measure statements are summary expressions which 
serve to highlight and emphasize areas deserving further consideration in 
order to enhance in- space experiment safety. More specifically, the state- • 
ments are directed to future NASA space programs involving the use of the 
Space Shuttle to transport and facilitate in- space scientific Experiments:. 

These preventive measure statements are the result of, and were initially 
identified in, the series of preventive measure assessments described pre- 
viously in Section 4. For convenience of presentation and utilization, the 
statements are grouped in the general areas of (1) design features, (2) loca- 
tional features, and (3) operational procedures, which were the selected areas 
of investigation in the preventive measure assessment activity. Within each 
of these general areas, the statements are further categorized according to 
distinctive sub- levels whose title or heading is suggestive of the key or prin- 
cipal safety- related criteria contained in the statement. 

Where appropriate, the statement (or accompanying example of equipment/ 
experiment/condition exemplifying the statement's intent) contains a reference 
to the particular Hazard/Emergency Analysis and Safety Criteria Summary 
Sheet of Table 5-1, This table contains, for each hazard source area of 
Figures 3-3 and 3-4, a summarization of pertinent causation factors, poten- 
tially hazardous results, and the spectrum of preventive measures applicable 
to the hazard source area. 

It is emphasized that the statements in a given area, e. g. , in the design fea- 
tures area, in many cases are not singular solutions, but require corollary 
or complementary considerations in the locational features and operational 
technique areas. For example, if an item were to be designed for jettisoning 


Reference by "H" number, e. g. , "H-l" refers to Table 5-1, H-l. 
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its location, could be important to facilitate jettisoning, and the conditions 
under which the jettisoning operation should be implemented should be defined. 
Therefore, for completeness of thought and purpose, in cases where a safety- 
related issue has reasonable implications in more than just the design area 
it may also be separately stated as a safety consideration in the locational 
and operational technique areas, as appropriate. 

It is also emphasized that the statements in some cases are addressed to only 
one of several possible approaches to enhancing safety in a given potentially 
hazardous situation. In still other cases some statements may be conflicting 
(with respect to each other or Experiment requirements) under certain condi- 
tions. Trade-off analyses would have to be performed to determine the most 
satisfactory solution in each instance. These trade-off analyses were beyond 
the scope of the present study. 

Further, the preventive measures are not presented in order of absolute value 
as safety measures. Generally accepted safety practice indicates, however, 
that the order of preference that should be followed in applying them is: 

a. Design features to eliminate the hazard 

b. Design features to control the hazard 

c. Use of protective safety devices 

d. Use of warning devices 

e. Implementation of operational procedures 

The level of detail in the preventive measure assessment, in many cases, 
was sufficient to overlap to a certain degree with generalized spacecraft 
safety criteria, even though the present analysis was restricted to identifying 
experiment- related safety criteria. Typical overlap areas included: 

a. Electrical systems (cable insulation, connectors, grounding, 
power distribution paths, redundancy, shielding, routing, etc.) 

b. Airlocks (mechanical design, materials, sealing provisions, 
etc. ) 

c. Vent systems (valves, regulators, location, pressure- 
relief, etc.) 
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d. Pressurized containers storing gases or liquids (valves, 
regulators, pressure- relief, vents, etc.) 

e. Batteries (electrolyte containment, venting, etc. ) 

f. Solid propellants (safing, arming, etc. ) 

g. Minimum number of egress ports in a manned habitable 
compartment 

h. EVA 

Safety practice areas in the above categories are referred to in the general 
sense only in the following statements, which are supplementary to generally 
accepted safety criteria for manned space flight equipment and operational 
procedures. 

Specific attention is directed to other recent studies conducted for NASA which 
resulted in safety criteria which may be directly applicable to experiment 
and/or accommodating vehicle safety considerations and which should be con- 
sidered by experiment designers, mission planners, etc. These include: 

a. The Prevention of Electrical Breakdown in Spacecraft 
(Ref. 6) 

b. Safety in Earth Orbit Study (Ref. 7,8,9, 10) 

c. Manned Space Flight Nuclear System Safety (Ref. 11) 

d. Space Station Safety Study (Ref. 12) 

e. Space Station Study, Experiment Safety (Ref. 13) 

Four other documents, even though not specifically safety-oriented, should 
also be of value: 

a. Space Shuttle Baseline Accommodation for Payloads (Ref. 14) 

b. Shuttle Orbiter/Payloads Monitor and Control Interface 
(Ref. 15) 

c. Assessment and Control of Spacecraft Electromagnetic 
Interference (Ref. 16) 

d. Shuttle Orbiter Applications and Requirements, Phase II 
(SOAR) (Ref. 17) 

Sections 5. 1, 5. 2, and 5. 3 present the preventive measure statements developed 
for the areas of design features, locational features, and operational techniques, 
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respectively. These sections relate the complete statement including the 
purpose or rationale for the statement (where not self-evident), any qualifying 
conditions, and representative illustrations of equipment /experiments /condi- 
tions which serve to illustrate or exemplify the intent of the statement. The 
formulation of selected measures into summary Safety Guidelines is presented 
in Tables 4-1 and 4-2 of Volume II, Part 2. 

5. 1 DESIGN FEATURES 

The general area of design features encompasses the Experiment Module, 
scientific and support equipment (generally referred to as Experiment Equip- 
'ment), and any ancillary contents or materials required in the conduct of the 
experiments. The preventive measure statements refer to particular design 
features or provisions which should be given consideration during the configu- 
ration selection and design process. 

5.1.1 V enting 

5. 1. 1. 1 Provide overboard vent systems, including pressure-regulation 
and pressure-relief subsystems. 

Applicable to components or experiment hardware elements 
whose contents are susceptible to pressure buildup, fire, 
explosions, or the accumulation of toxic or noxious substances 
whose inadvertent release into a compartment would result 
in contamination of atmosphere or surfaces. Such components/ 
elements would include: 

a. Batteries (H-19) 1 ' 

b. Fuel cells 

c. Cryogenic dewars (H-24) 

d. Pressurized or volatile liquid containers 
(including propellants)(H- 22) 

e. High-pressure gas bottles (H-23) 

f. High-temperature sources (gas jets, combustors, 
furnaces, etc.)(H-l) 

g. Holding and rearing cages (for animals, insects, 
plants) (H- 21) 


"See Table 5-1, H-19. 
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h. Special work areas 

i. Biological containers (H-21) 

5. 1. 1. 2 Configure overboard vent systems to: 

a. Avoid common exit sources or immediately adjacent 
exterior locations to preclude the mixing of potentially 
combustible or reactive substances, or to avoid 
cross -contamination. 

b. Prevent vent efflux from entering Orbiter cargo bay. 

c. Prevent efflux in the vicinity of contamination- 
sensitive sensors (e. g. , telescopes, camera lenses, 
etc. ) aboard either the Orbiter or Experiment Module. 

5. 1. 1. 3 Incorporate means for controlled venting which also permits a 
quick pressure relief of the vent system in case an emergency 
should arise during a no-venting period. 

To permit controlled venting during potentially critical 
operational periods (e.g., EVA, docking, accurate- 
pointing hold periods, etc.). 

5.1.2 Purging 

5. 1. 2. 1 Provide a purge system capability, including associated vent 
system requirements (see 5. 1. 1). 

Applicable to Experiment Module compartment areas and 
equipment subject to spills or leaks of fluids, gases, or 
waste products. Typical examples include: 

a. Film-processing areas (H-18) 

b. Areas containing cryogenic dewars, non- 
cryogenic fluids or gases, or transfer lines or 
outlets from such sources (H-22, H-23, H-24) 

c. High-temperature devices (gas jets, combustors, 
furnaces, etc.)(H-l) 

d. Special work areas for handling animals, insects, 
plants, serums, isotopes, embalming fluids, 
other chemicals, etc. (H-21) 

5. 1. 2. 2 Provide the capability to purge all tanks or containers holding 
non-inert liquids or gases. 

For purging at the completion of experiment activities 
or prior to return to earth. (H-22, H-23) 
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5. 1. 3 


Safing 

5. 1. 3. 1 Utilize safing mechanisms, devices. 

To prevent inadvertent actuation of equipment whose 
actuation could result in an uncontrolled hazardous situa- 
tion. Such could include: 

a. Solid propellant -containing units (pyrotechnics, 
solid rocket motors, etc.)(H-l6) 

b. Biological and radiobiological containers (H-21) 

c. Radiation sources (reactor or isotope)(H- 1 7) 

d. Balloon-inflating devices (H-ll) 

5.1.4 Conditioning 

5. 1.4. 1 Consider providing an independent (separate from Experiment 

Module compartment EC/LS) environmental conditioning system. 

Applicable to the holding and rearing cages housing 
animals, insects, plants. The cage pressure level 
should in all cases be lower than cabin pressure to 
prevent cage content efflux into the cabin atmosphere. 

(H-21) 


5.1.5 Shielding 

5. 1. 5. 1 Incorporate mechanical shielding around rotating equipment. 

To provide for containment of rotating members in the 
event of breakup due to overspeed. Illustrative equip- 
ment includes: 

a. Biological centrifuges (H-8) 

b. Human centrifuge (H-8) 

c. Rotating litter chair (H-8) 

5. 1. 5. 2 Utilize radiation shields for the crew and sensitive equipment. 

To protect crew and equipment from excessive exposure 
to radiation fields. Example areas include: 

a. X-ray machines (H- 17) 

b. Radioisotopes (H-17) 

c. Radioisotope Thermal Generators 
(RTGs )(H- 17) 
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d. Nuclear reactor power sources 

e. Lasers (H-3) 


5. 1. 5. 3 Incorporate shielding in all solid propellant- containing devices 
and/or areas housing such devices. 

To prevent inadvertent activation through exposure to 
excessive RF or magnetic fields. Example devices include: 

a. Pyrotechnics (H-16) 

b. Solid rocket motors /stages (H-16) 

c. Spin-up rockets (H-16) 

5. 1. 5. 4 Provide pressure compartments with an airlock and decontamina- 
tion equipment for the conduct of experiments with radioactive 
materials. (H-21) 


5. 1.6 
5. 1.6. 1 


5. 1.7 
5. 1.7. 1 


Source Strength 

Where possible, select the inherent source strength of equipment 
with permeating fields, whose loss of control could result in a 
hazardous situation, to be compatible with crew/ equipment. 

The source strength maximum value to be tolerable to 
man and to sensitive equipment in either the Experiment 
Module or the Orbiter. Illustrative examples include: 

a. RF-generators (H-17) 

b. Superconducting magnet (H-5) 

c. Laser beams (H-3) 

d. Negative pressure source for the Lower Body 
Negative Pressure Chamber (H-12) 

e. Radiation sources (X-rays, isotopes, RTGs) 

(H-17) 

Fail-Safe Configurations 

Design mechanical systems with fail-safe features to prevent the 
occurrence of hazardous failure modes. 

Example areas include: 

a. Means to preclude failure of deployment mechanisms 
to fully retract 
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1. Scientific airlocks (H-6) 

2. Booms /platforms /antennas (H-10) 

3. Erection/retraction mechanism (H-30) 

b. Means for assuring that if a propulsion system failure 
occurs it is in the non-thrusting mode 

1. Experiment Module Attitude Control System (ACS) 

2. Astronaut Maneuvering Unit (AMU)(H-13) 

3. Maneuverable Work Platform (MWP)(H-14) 

c. Means to prevent failure of docking system mechanisms 
to release from attached or locked-up mode (H-31) 

d. Means to ensure a non-hazardous mode of failure which 
occurs prior to a potential catastrophic break-up of 
rotating components due to overspeed (H-8) 

5. 1.7.2 Configure fluid, gas, and electrical components of experiment 
equipment to fail-safe. (H-22, H-23, H-24, H-20) 

5. 1.7. 3 Provide fluid line connectors having connect/disconnect features 
which ensure fast operation, cleanliness of the connection, and 
positive locking. 

5.1.8 Protective Safety Devices 


5. 1.8.1 Interlocks 
5. 1.8. 1.1 Automatic 

Incorporate automatic interlocks of mechanical, electrical, or 
electromechanical nature. 

To provide automatic shutdown and/or to prevent operation 
under unsafe conditions. Representative areas of applica- 
tion include: 

a. Overboard vent systems --to prevent operation of 
experimental equipment requiring an operative vent 
in the event of vent system malfunction (H-2) 

b. Field generators --to provide automatic shutdown in 
the event field strength intensity exceeds the design 
range 

1. X-ray equipment (H-17) 

2. Lasers (H-3) 

3. RF-generators (H-17) 

4. Superconducting magnet (H-5) 
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c. Negative pressure source -- to provide automatic 
means for a controlled shutdown of the Lower Body 
Negative Pressure Chamber experiment in the event 
the vacuum decreases below the permissible level 
(H-12) 

d. Optical telescope covers -- to provide remotely 
operated lens covers so that they can be covered during 
non-use periods (H-9) 

e. Rotating equipment --to provide for automatic shutdown 
in the event rotational speeds exceed design values 

1. Biological centrifuges (H-8) 

2. Human centrifuges (H-8) 

3. Rotating litter chair (H-8) 

f. Gas bottle and battery recharging systems --to prevent 
maintenance and/or servicing operations until positive 
engagement is ensured between the recharging system 
and the component/ subsystem to be serviced (H-28) 

5.1.8. 1.2 Manual Actuation 

Incorporate interlocks requiring manual actuation. 

To require a knowledgeable volitional act by a crew member 
to activate, actuate, open, remove, or release inherently 
hazardous experimental equipment, contents, or devices. 
Representative areas of application include: 

a. To prevent inadvertent activation or actuation of: 

1. Electrically-powered equipment (H-20) 

2. Simultaneous opening of inner and outer scientific 
airlock hatch doors (H-6) 

3. Laser beams (H-3) 

4. Balloon- inflating devices (H-il) 

5. Negative pressure sources (H-12) 

6. Rotating equipment (H-8) 

7. Solid propellant -containing devices (H-16) 

b. To open or remove protective covers or closures 
for: 

1. Photochemicals (H-18) 

2. Emulsions (H-25) 


67 



3. Containerized fluids (H-22) 

4. Radioisotopes (H-21, H-17) 

5. Cage doors (H-21) 

6. The Active Cleaning Device (H-26) 

c. To prevent the inadvertent release of externally 
attached systems: 

1. Astronaut Maneuvering Unit (AMU)(H-13) 

2. Maneuverable Work Platform (MWP)(H-14) 

3. Teleoperator spacecraft (H-15) 

5. 1 . 8. 2 Covers 

Provide protective covers. 

To prevent inadvertent contact with potentially hazardous sur- 
faces, contents, and elements. Applicable equipment areas 
include: 

a. Optical telescopes (direct viewing)-- to prevent eye 
damage from direct or reflected sunlight. (The 
"cover" may actually be a fast-acting filter. )(H-9) 

b. Batteries and fuel cells --to prevent electrical 
shock (H- 19) 

c. Emulsion sheets --to prevent chemical injury (H-25) 

d. High-temperature surfaces, e. g. , furnaces -- to 
prevent burns and inadvertent release of liquid metals, 
glasses, etc. during melting and casting operations 
(H-l) 

e. The Active Cleaning Device --to prevent exposure to 
contaminants inside the device (H-26) 

f. Biological containers --to prevent release of contents 
(H-21) 

g. Scientific centrifuges -- to prevent release of contents 
(H-8) 

h. Rotating portions of ergometer --to prevent physical 
injury (H-8) 

i. Devices with high-voltage potential --to prevent 
electrical shock (H-20) 
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5. i . 8. 3 Stops 

Provide protective stops or interlocks to confine or limit direc- 
tional movement or adjustment. 

Applies to experiment equipment whose inherent nature 
requires directional control for safe operation. Applicable 
equipment includes: 

a. Laser beams (H-3) 

5. 1 . 8. 4 Guards 

Provide protective guards. 

To prevent access to experiment equipment which could pose 
physical proximity hazards when in operation. Typical 
equipment includes: 

a. Laser beams (H-3) 

b. High-temperature devices (gas jets, combustors, 
furnaces, etc.)(H-l) 

c. Rotating equipment (human centrifuge, rotating 
litter chair, etc. )(H-8) 

5. 1.8. 5 Discharge Devices 

Incorporate discharge devices. 

To de-energize high-voltage electrical systems or compo- 
nents when the system is shut down. Applicable areas in- 
clude: 

a. All electrically-powered equipment within the 
Experiment Module having high-voltage compo- 
nents (H-20) 

b. Subsatellites incorporating high-voltage compo- 
nents and which require handling, maintenance, 
or sensor replacement (H-7) 

To establish equipotential between the Orbiter and retrieved 
satellites /Experiment Modules (H-31) 


5. 1.8. 6 Laser Energy Absorbing Means 

Interpose a material suitable for absorbing laser beam energy 
between the laser beam target and the Experiment Module 
primary structure. 

Such means would prevent Module structural damage in the 
event of target failure. (H-3) 
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5. 1.8. 7 


Extendable -Aid Device 


Provide extendable-aid devices (e. g. , "lassos", telescoping 
rods with end-hooks, etc.). 

To render immediate retrieval assistance to personnel in 
EVA and preclude EVA stranding. (H-27) 

5. 1 . 8. 8 Emergency Provisions 

Provide special emergency equipment. 

Whenever an Orbiter flight carries Experiment Equipment 
aboard which could cause a hazard for which the normally 
carried emergency equipment is hot suitable, appropriate 
emergency equipment should be provided (e. g. , appropriate 
fire extinguishers, decontaminants, protective gear, anti- 
dotes, etc.). 


5. 1.8. 9 


5. 1. 9 


Emergency Brake Provisions 

Provide a back-up locking device for rotatable equipment. 


Applicable to rotatable equipment which would pose a 
hazard to the crew members or adjacent equipment upon 
failure of the primary locking or latching mechanism. 
Example areas include: 


a. Rotatable telescopes (H-9) 


b. Rotating litter chair (H-8) 


J etti s oning / Dumping 

Consider configuring for ease of jettisoning. 


Applicable to experiment equipment with inherently 
hazardous contents or characteristics whose uncontrolled 
operation or malperformance could jeopardize an Experi- 
ment Module and/or the Orbiter or the return to Earth. 
Applicable equipment which may have to be considered for 
jettisoning/dumping include: 

a. Objects within scientific airlock --in the event of 
hang-up or other need to dispose of object (H-6) 


b. Spark- chamber --in the event of malfunction involv- 
ing argon and methane gas bleed (H-4) 

c. Booms /platforms /antennas --in event of failure to 
fully retract (H-10) 


d. Subsatellites --in event of certain component or sub- 
system malfunction (H-7) 
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e. 


Cryogenic dewars --in the event of tankage leak 
or rupture (H-24) 

f. Emulsion plates and containers --in the event of 
retracting mechanism failure (H-25) 

g. High-pressure gas bottles (H-23) 

h. Containerized fluids (H-22) 

i. Propellant tanks (H-22) 

j. High-temperature devices (e. g. , gas jets, com- 
bustors, furnaces)(H-l) 

k. Radiation sources (radioisotopes, etc.)(H-17) 

l. Astronaut Maneuvering Unit (AMU)(H-13) 

m. Maneuverable Work Platform (MWP)(H-14) 

n. Teleoperator spacecraft (H-15) 

o. Automated satellite payloads (including propulsive 
stages) 

p. Any spacecraft or other object docked or partially 
docked to the Experiment Module (H-31) 

q. The entire Experiment Module (Pallet, MSM, or 
RAM)(H-3i) 

r. The liquid and gaseous contents of storage tanks, 
bottles (H-22, H-23) 

5.1.10 Remote Deployment /Ope ration 

5. 1. 10. 1 Configure for remote deployment/retrieval and remote operational 
control. 

Applies to experiment equipment with inherently hazardous 
contents or characteristics. Typical areas and equipment 
include*. 

a. Remote deployment of: 

1. Subsatellites --to reduce handling operations and 
to avoid having to pass through an airlock (H-7) 

2. Contamination sample plates, holding racks, and the 
Active Cleaning Device (H-26) 

3. Teleoperator spacecraft (H-15) 

b. Remote operational control of: 

1. High-pressure gas sources (H-23) 

2. High-temperature sources (gas jets, combustors, 
furnaces, etc.)(H-l) 


71 


3 . 


Feeding and cleaning provisions in holding and 
rearing cages (to avoid opening cage doors) (H-21) 

4. Gas bottle and battery recharging systems associ- 
ated with satellite maintenance (H-28) 

5. Docking control system (including guidance and 
navigation, propulsion, etc.) of any spacecraft 
attempting to dock with the Experiment Module 
or Orbiter (H-31) 

5. 1. 10. 2 Design and configure experiment equipment for minimum EVA 
operations . 

5.1.11 Holding 

5.1.11.1 Provide means for positive holding and securing of transportable 
containers. 

Applies to such containers (chemicals, nutrients, etc.) 
when not in actual use by crew members. (H-22) 

5.1.11.2 Provide protuberances or grips for physical transport. 

Applicable to equipment with contents posing chemical injury 
upon surface contact. Typical items include: 

a. Contamination sample plates and holding racks (H-26) 

b. Emulsion sheets and holders (H-25) 

5.1.11.3 Provide attach and holding means external to habitable 
compartment . 

Applies to equipment whose primary function is accomplished 
exterior to the Experiment Module. Typical items include: 

a. Scientific subsatellites (H-7) 

b. Contamination sample plates and racks (H-26) 

c. Astronaut Maneuvering Unit (AMU) (H-13) 

d. Maneuverable Work Platform (MWP) (H-14) 

e. Teleoperator spacecraft (H-15) 
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5.1.12 Packaging/ Containment /Marking 

5. 1. 12. 1 Provide holding and rearing cages with means, preferably 
automatic, for feeding of caged inhabitants and removal and 
disposal of liquid and solid waste products. 

Such provisions should be externally or remotely operable 
(see 5 . 1 . 10. b . 3 ) and be capable of performing on orbit as 
well as on the launch pad. (H-21) 

5. 1. 12.2 Provide containers or other provisions for preserving and/or 
storing dead animals, insects, plant specimens, etc. 

Candidate techniques include (but are not limited to) 
embalming, freezing, etc. (H-21) 

5. 1. 12.3 Configure EVA suits and PLSS units, including voice communi- 
cation, for "plug-in” of an emergency PLSS package. (H-27) 

5.1.12.4 Provide an Experiment Module and/or Orbiter with exterior 
connections (preferably near EVA airlock) for "plug-in" of 
EC/LS umbilicals and voice communication. (H-27) 

5.1.12.5 Configure in modular or self- contained units . 

Applicable to hazardous experiment equipment composed 
of separable components and whose nature indicates the 
potential desirability of either remote storage/deployment 
or the need for jettisoning. Typical equipment includes: 

a. Gas bottle and battery recharging systems (H-28) 

b. Cryogenic dewars (where dewar is an inherent part 
of the system, as in the supercooled magnet, or 
where the dewar is used for periodic replacement) 
(H-24) 

c. Systems containing principally quantities of reactive 
fluids (cryogenic or non-cryogenic ); operation in the 
unmanned detached (free flying) module mode would be 
preferable for these systems (H-22, H-24) 

d. Nuclear and plastic emulsion sheet devices, including 
remote storage and deployment mechanisms (H-25) 

e. Gaseous release devices and their associated ICN 
and NH3 canisters (H-22) 

f. The leak- detection experiment and its associated 
GHe container (H-23) 
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g. The spark -chamber device and its associated argon 
and methane tankage (H-22, H-4) 

h. High-temperature devices such as gas jets, combustors, 
furnaces, and the fire-sensing and suppression device 
(H - 1 ) 

i. A self-contained cleaning unit (cleaning materials, 
waste disposal provisions, etc.)for EVA cleaning 
operations (H-26) 

5.1.12.6 Provide end closures, spouts, or caps with no-spill, positive 
sealing characteristics . 

Applicable to equipment intended for use as fluid holders, 
fluid receivers, or fluid transfer devices. Typical items 
include: 

a. Batteries (H-19) 

b. Fuel cells 

c. Photochemical storage containers (H-18) 

d. Liquid nutrient containers (H-22) 

e. Biological storage containers (H-21) 

f. Iostope fluid containers (H-21) 

g. Miscellaneous liquid chemical containers (H-22) 

5.1.12.7 Provide the Active Cleaning Device with covers or end closures. 

To prevent exposure of the crew to contaminants within 
the device. (H-26) 

5. 1. 12.8 Provide an indication of high-voltage equipment operation on the 
master experiment monitoring panel. 

To warn the crew of the high-voltage hazard source. (H-20) 

5. 1. 12.9 Prominently and permanently mark all containers having remov- 
able end closures which contain inherently hazardous materials. 

To identify the specific nature of the contents together with 
warning and handling notes including antidotes, where appro- 
priate (e.g., toxic fluids, serums, etc.). (H-22, H-21) 

5. 1. 12. 10 Configure and package equipment for retention of integrity and 
containment of contents. 

Applicable to all Experiment Module subsystems (e.g., cages, 
containers, devices) during the load and temperature environ- 
ments of all mission phases, including all intact aborts. 
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5.1.12.11 
5.1. 12. 12 

5. 1.12. 13 

5.1.12. 14 
5.1.12. 15 

5.1.13 

5.1.13.1 

5.1. 13.2 

5.1.13.3 


Provide means to ensure that failure of any subsystem within an 
Experiment Module will result in containment within the subsys- 
tem or Module and not propagate to the Orbiter. 

Packaging of experiment equipment and materials should reflect 
consideration of the number and types of discrete hazard sources 
contained within the limited volume of a Module, and their poten- 
tial interactions and synergistic effects. 

Design experiment and support equipment to withstand rapid AP 
changes without causing a hazardous condition (e.g., container 
deformation under reduced pressure conditions may result in 
wire-touching and shorts, broken connections, etc.). 

Design experiment equipment fluid piping and connectors with 
ready accessibility in an Experiment Module. 

No equipment whose malfunction could obstruct free passage 
should be located, internally or externally, near crew access 
and egress passageways through airlocks, tunnels, or docking 
ports (e.g., pressure bottles, batteries, etc.). 

Materials Selection 

Avoid the use of magnetic tools when experiments having mag- 
netic field sources (e.g., supercooled magnet) are incorporated 
in the Experiment Module. (H-5) 

Utilize non -combustible materials except where the inherent 
nature of the experiment requires a combustible material; in 
that case employ special precautionary measures. 

Avoid the use of mercury in experiment equipment. 

If mercury is indispensable, accidentally escaped mercury 
should be prevented from entering habitable compartments 
(e.g., by locating it outside such compartments, double con- 
tainment, etc.), because spilled mercury cannot be removed 
completely and will permanently poison the compartment 
atmosphere. 
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5.2 


LOCATIONAL FEATURES 


The choice of experiment equipment location involves both relative placement 
(exterior, interior, circumferential, longitudinal, etc.) and the effect of 
placement on potential operational needs (ease of jettisoning, proximity, 
accessibility, etc.). The preventive measure statements refer to preferred 
particular placement or location features or provisions which should be given 
consideration during the configuration selection and design process. It should 
be recognized that special safety feature s , such as double containment, could 
in certain cases void one of these particular statements. 

5.2.1 Exterior Placement 

Consideration should be given to locating inherently hazardous 
equipment exterior to habitable Module compartments. 

Applicable to experiment equipment whose inherent nature, 
associated contents, or operational modes indicate that a 
malfunction could precipitate an uncontrollable hazard. 
Examples of such equipment and conditions include: 

a. Spark-chamber - -to prevent argon or methane gas 
leakage from contaminating Experiment Module 
atmosphere (H-4) 

b. Laser apparatus, with laser beam pointed away from 
the Experiment Module primary habitable structure, 
the Orbiter, and any other systems (H-3) 

c. Balloons and their inflating devices (H-ll) 

d. Subsatellites (H-7) 

e. Cryogenic dewars and fluid transfer lines (H-24) 

f. Emulsion sheet devices (H-25) 

g. Containers holding reactive or toxic fluids, gases 
(H- 22, H - 23 ) 

h. Gaseous release devices (H-23) 

i. Gas jets, combustors, furnaces, etc. (H- 1 ) 

j. High-pressure containers (H-23) 

k. Devices for EVA operation (Astronaut Maneuvering 
Unit, Maneuverable Work Platform, teleoperator 
spacecraft) (H-13, H-14, H-15) 


7 6 




1. Leak -detection experiment module (H-23) 

m. Fire- sensing and suppression experiment module 
(H — 1 ) 

n. Radioisotope thermal generators (RTGs) (H-17) 

o. Contamination sample plates and racks (H-26) 

p. Battery and gas bottle recharging equipment (H-28) 

q. Any EVA sensor cleaning units, accessible to EVA 
airlock (H-26) 

5.2.2 Interior Considerations 

5. 2. 2.1 Position rotatable telescopes (when within Experiment Module) 
to facilitate egress activities. 

So that if the telescope latching mechanism fails in any 
position there will still be sufficient room for a crew 
member to reach normal Module egress ports. (H-9) 

5. 2. 2. 2 Position laser apparatus (if within Experiment Module) so as to 
prevent laser operation outside a shielded area. (H-3) 
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5. 2. 2.4 


I 

I 

i 


! 

j 

I 

1 

i 


Position rotatable equipment such that a clear egress path exists 
when the equipment is in any orientation. (H-8) 

Locate interior equipment with escapable contents in special 
work areas with spill containment, waste disposal, purge, con- 
tamination control, and vent provisions. Such areas may 
require separate environmental control. 

Examples of equipment types include: 

a. Batteries (H-19) 

b. Fluid canisters (H-22) 

c. Gaseous canisters (H-23) 

d. Gas jets, combustors, furnaces (H-l) 

e. Radioisotope fluid containers (H-17) 

f. Biological containers (H-21) 

g. Animal cage and cage rack assemblies (H-21) 

h. Contaminated products or devices (H-26) 
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5.2.3 Circumferential/ Longitudinal Placement 

5.2.3. 1 Orient circumferentially located scientific airlocks in such a 
position in the Experiment Module that a jammed -open door 
will not interfere with cargo bay door closure. (H-2) 

5. 2.3. 2 Locate the terminus of overboard vents such that vent efflux 
will not enter the Orbiter cargo bay. (H-2) 


5.2.4 Proximity Considerations 


5. 2.4.1 Locate devices with permeating fields away from field- sensitive 
equipment (including solid propellant ignitors) and habitable com- 
partments unless properly shielded. 

Example equipment includes: 

a. RF-generator s (H-17) 

b. Superconducting magnet (H-5) 

c. Radiation sources (H-17) 

5. 2.4.2 Locate exterior equipment away from EVA hatches. 

To avoid potential EVA hazard sources (e.g., shock, 
impact, tether entanglement, etc.). Example areas include: 

a. Booms/platforms /antennas (H-10) 

b. Radiation sources (H-17) 

c. High-voltage equipment (H-20) 

d. RF-generators (H-17) 


5. 2.4.3 Located exterior equipment away from docking ports. 

To avoid potential docking hazard sources. Examples 
include: 

a. Booms/platforms/antennas (H-10) 


5. 2.4.4 Keep balloons and balloon-inflating device/apparatus separate 
from one another until time for inflation. (H-il‘) 


5.2.4. 5 Locate batteries away from potentially combustible materials 
or systems that could be damaged by escaping battery fluids. 
This applies also to Experiment Module compartments which 
may have such materials within them at any time during the 
mission. (H-19) 
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5. 2.4. 6 
5. 2.4.7 
5. 2.4.8 

5.2.5 

5.2. 5. 1 

5. 2. 5. 2 

5. 2. 5.3 

5.2. 5.4 
5. 2. 5. 5 

5. 2.5. 6 

5.2. 5.7 

5. 2. 5. 8 

5. 2. 5. 9 


Locate reactive fluid tanks non -adjacently and in different 
compartment areas. (H-22) 

Locate the terminus of vents to avoid adjacent locations where 
potentially reactive vent effluxes could combine. (H-2) 

Locate equipment with hot surfaces away from other equipment 
in the same Module. (H-l) 

Accessibility Considerations 

Place high-voltage components of high-voltage equipment in not- 
normally-accessible zones, requiring knowledgeable, volitional 
acts to reach or touch them. (H-20) 

Locate film, photochemicals, and film vaults away from potential 
ignition source areas and remote from open habitable areas. 

(H- 18) 

Position the laser apparatus (if within the Module) such that it is 
away from normal crew passage routes, requiring a volitional 
access movement to reach it. (H-3) 

Store balloon- inflation device in a remote area to help ensure 
against activation until balloon use reaches near -deployment 
stage. (H- 11) 

Locate externally mounted devices for EVA operations (e.g., 
Astronaut Maneuvering Unit, Maneuverable Work Platform, 
teleoperator spacecraft) so as to permit unimpeded egress 
from EVA hatch and to provide convenient access for their 
use by astronauts in EVA. (H-13, H-14, H-15) 

Locate external EC/LS umbilicals and communication plug-in 
unit near EVA hatch. (H-27) 

Locate EVA tether attach points and fixtures so as to minimize 
possibility of tether entanglement. (H-27) 

Locate Experiment Modules (Pallet, MSM, RAM) and experiment 
equipment so as not to interfere with any egress from or ingress 
to airlock hatches or the Orbiter tunnel (neither in the installed 
nor in the extended position). 

Locate experiment equipment attached externally to Experiment 
Modules so as not to interfere with any egress from or ingress 
to airlock hatches or the Orbiter tunnel (neither in the installed 
nor in the extended position). 


5.2. 5. 10 Locate all docking ports so as to ensure visual observation of the 
docking operations . (H-31) 

5.2.5.11 Locate equipment requiring periodic maintenance (e.g., animal 

cages) so as to facilitate access on the ground and on orbit. (H-28) 

5.2. 5. 12 Locate equipment within the Experiment Module so as to allow an 

IVA-suited man to pass by regardless of the position of movable 
exterior equipment parts. (H-29) 

5.2.6 Jettisoning/ Dumping Considerations 

5.2.6. 1 Consideration should be given to locating inherently hazardous 

equipment for ease of jettisoning/dumping. 

Applicable to experiment equipment with inherently hazardous 
contents or characteristics whose uncontrolled initiation, oper- 
ation, or malperformance could jeopardize Experiment Mod- 
ule and/or Orbiter integrity. Applicable equipment system 
areas include: 

a. Spark-chamber (H-4) 

b. Cryogenic dewars (H-24) 

c. Subsatellites (H-7) 

d. High-pressure gas bottles (H-23) 

e. Containerized fluids (H-22) 

f. Propellant tanks and/or contents (H-22) 

g. High-temperature devices (e.g., gas jets, combustors, 
furnaces) (H- 1 ) 

h. Radiation sources (radioisotopes require special analy- 
sis of the potential radiological consequences) (H-17) 

i. EVA use devices (Astronaut Maneuvering Unit, Maneu- 
verable Work Platform, teleoperator spacecraft) 

(H - 1 3 , H-14, H-15) 

5. 2. 6. 2 Consider provisions for dumping hazardous fluids (when carried 
in large quantities) which make jettisoning of their container 
unattractive . 

5. 2. 6. 3 If emergency dumping of fluids is determined to be a requirement, 
provisions should be made so that dumping can be done during any 
phase of the mission, including the phase of aerodynamic flight of 
the Orbiter and on the ground. 
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5.3 OPERATIONAL TECHNIQUES 


The general area of operational techniques encompasses both actual operational 
steps (setup, deployment, experiment/equipment operation, jettisoning, check- 
out, purging, deactivating, securing, etc.) and associated caution, warning, and 
monitoring system elements (sensors, visual and aural alarms, etc.) which may 
be necessary for safe and timely implementation of the actual operational steps. 
The preventive measure statements refer to particular operations and opera- 
tional requirements which should be considered during the configuration selec- 
tion and design process. 

5.3.1 Setup/ Deploy /Operate 

5.3. 1.1 Protective Garments/Device s 

5. 3 . 1 . 1 . 1 Wear radiation dose -accumulation badges . 

To guard against excessive accumulation from both experiment 
equipment and natural sources. (H-17) 


5.3. 1.1.2 Wear suitable protective garments, including gloves, face masks, 
etc . 

Applicable when handling or involved with equipment or 
contents which could cause injury or illness by mere 
contact or inhalation. Applicable areas include: 

a. Film, film packs, film-processing operations (H-18) 

b. Toxic or reactive fluid container handling (H-22) 

c. Furnace-related operations (melting, casting, etc.) 

(H-l) 

d. Animals, insects, plants (H-21) 

e. Exposed contamination sample plates (H-26) 

f. Sensor cleaning operations (H-26) 

g. Biologicals and biological containers (H-21) 

h. Isotopes, serums, etc. (H-21) 

i. Embalming of cadavers 
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5.3. 1.2 Remote Deployment 

5.3. 1.2. 1 Deploy emulsion sheets with remote, deployment mechanisms . 
(H-25) 


5.3. 1.3 Remote Operation 

5.3. 1.3.1 Control remotely the initiation, activation, or operation of 

experiment equipment exhibiting characteristics for potential 
explosion, fire, or contamination due to equipment malfunction 
and/or contents. 

Illustrative experiment areas include: 

a. Reactive fluid experiments (H-22) 

b. Gas bottle and battery recharging operations (H-28) 

c. Leakage -detection experiment (H-23) 

d. Spark-chamber experiments (H-4) 

e. Gas jet, combustor, and furnace experiments (H- 1 ) 

f. Feeding and cage-cleaning operations (H-21) 

5.3. 1.3.2 Utilize an Experiment Module of the detached, free -flying RAM 
type, remotely deployed at a safe distance from the Orbiter, for 
the incorporation and conduct of experiments whose inherent 
nature implies risks of explosion, fire, or collision. 

The safe distance should be established by consideration 
of pressure wave and shrapnel phenomena associated with 
the explosion characteristics of the specific experiment 
type. Applicable experiment types include: 

a. Combustion experiments (H-i) 

b. Propellant storage and transfer experiments 
(H-22, H- 24) 

c. Furnace- related experiments (casting, melting, 
etc.) (H-l) 

d. Maneuverable Work Platform-controlled and teleoperator 
spacecraft-controlled docking experiments (H-14, H-15) 

5.3. 1.4 Special Work Areas 

Perform experiment operations in special work areas with pro- 
visions for spill containment, purge, venting, contamination 


82 



control, and waste disposal. Such areas (e.g., glove.boxes, 
double containment, etc.) may also require separate environ- 
mental control. 

Applicable when the nature of experiment equipment or 
materials involved indicate the possibility of surface or 
atmospheric contamination through the release of toxic 
or noxious substances. Examples of operations include: 

a. Processing film (H-18) 

b. Performing biological experimentation (H-21) 

c. Performing uncaged animal, insect, and plant 
handling operations (H-21) 

d. Performing contamination experiments or sensor 
cleaning (H-26) 

e. Handling toxic fluid substances, isotopes, serums, 
etc. (H-21) 

5.3. 1.5 Restricted Operations 

5.3. 1.5. 1 Suspend all experiment operations involved with controlled 

radiation sources, RF-generators, supercooled magnets, and 
rotating equipment during EVA operations and Experiment 
Module erection, retraction, docking, and undocking operations. 
(H-27, H-30, H-3 1 ) 

5.3. 1.5.2 Do not transport experiments with strong RF or magnetic field 
sources on the same Orbiter flight with payloads having solid 
propellant propulsive stages unless appropriate precautionary 
measures are incorporated. (H-5, H-17) 

5.3. 1.5.3 Control the timing of experiments with magnetic or RF-fields 
to avoid adversely affecting sensitive Shuttle subsystems. 

Some Shuttle subsystems (e.g., guidance and navigation 
sensors) may be adversely affected by the normal opera- 
tion of experiment magnetic or RF-fields. Coordinated 
sequencing of active periods might be used to prevent 
adverse interactions . (H-5, H-17) 

5.3. 1.5.4 Perform experiments with chemicals posing toxic gas or vapor 

contamination hazards in pressure compartments with a separate 
environmental control system. (H-23) 
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5.3. 1.6 


Special Precautions 
EVA Operations 


5.3. 1.6.1 


5.3. 1.6. 1. 1 Conduct particularly hazardous EVA experiment operations by 
at least two EVA men, one of them performing the work and the 
other being a Safety man who is standing by for instant action in 
close proximity to the first one. 

The sole function of the Safety man is to observe the worker 
and assist him in case he gets into an emergency situation. 
Depending on the circumstances, one Safety man might look 
after two EVA workers. (H-27) 

5.3. 1.6. 1.2 For normal EVA experiment operations provide at least two 
EVA men who work together as a team (buddy system). 

Such men should perform work in relatively close proximity 
to each other in order to provide aid and assistance to each 
other. (H-27) 

5.3. 1.6. 1.3 Provide an additional crewman, suited and ready to go into 
EVA, in the event of an emergency involving any of the men 
already in EVA. 

This man should be in visual contact with the men in EVA 
(either direct viewing or TV monitoring). (H-27) 

5.3. 1.6. 1.4 Avoid experiment EVA; (H-27) 

a. When high-voltage, RF-field, or magnetic fields are 
present 

b. During Experiment Module erection, retraction, docking, 
or undocking operations 

c. Near attitude control nozzle jets 

5.3. 1.6.2 EVA-Device Operations 

5.3. 1.6.2. 1 Conduct AMU and MWP operations in a tethered mode unless 
dictated otherwise by the experiment requirements. (H-13, 

H- 14) 

5.3. 1.6. 2. 2 Remotely monitor Astronaut Maneuvering Unit (AMU) and 

Maneuverable Work Platform (MWP) propulsion subsystems and 
deactivate them if pressures or temperatures exceed normal 
range values or other evidence of malfunction is indicated. 
(H-13, H- 14) 
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5. 3. 1 . 6. 3 Egress Operations 

5.3. 1.6.3. 1 Provide a second or Safety crewman to stand by during airlock 
operations for purposes of rendering aid and assistance if 
necessary. (H-29) 

5.3. 1.6. 3. 2 Provide pressure suits (including PLSS units) in the Experiment 
Module for crew members in the event EVA egress from the 
Module should be required to reenter the Orbiter (via the 
Orbiter EVA airlock). (H-29) 

5.3. 1.6. 3. 3 Wait until the Experiment Module is fully erected and secured, 
and interface circuits have been checked out, before initiating 
entry into the Module. (H-29, H-30) 

5.3. 1.6. 3. 4 Have all personnel leave the Experiment Module (and enter the 
Orbiter) prior to initiating retraction of the Module. (H-29, 

H-3 0) 

5.3. 1.6.4 Contingency Plans and Procedures 

5.3. 1.6.4. 1 Prepare contingency plans (including shutdown and backout 
procedures) for every Orbiter flight. 

5.3. 1.6. 4. 2 Appoint a single crew member responsible for implementing 
safety and contingency plans. 

5.3. 1.6. 4. 3 Prepare loading/unloading time schedules for equipment 
requiring servicing from the ground or Orbiter. 

5.3. 1.6. 4. 4 Establish startup and shutdown procedures for all experiment 
equipment; such sequences should minimize effects on other 
equipment and should have no adverse effect on Orbiter operat- 
ing systems. 

5.3. 1.6.4. 5 Establish order-of-connection procedures for all fluid 
connections. (H-22, H-23) 

5.3. 1.6. 4. 6 Experiment equipment containing nuclear materials shall con- 
form with established nuclear safety requirements. (H- 17) 

5.3.2 Deactivating /Securing 

5.3.2. 1 Nuetralize (discharge) all high-voltage components after ground 

checkout and/or operation. (H-20) 

5. 3. 2. 2 Purge Orbiter cargo bay in the event of inadvertent hazardous 
efflux release into the bay by Experiment Module overboard 
vents. (H-2) 
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5.3. 2.3 Purge, inert, and safe all returnable tanks/containers holding 

non-inert substances after the experiment is completed or prior 
to reentry. (H-22, H-23) 


5.3. 2.4 Secure all containers in their respective storage areas after use. 
(H-22, H-23) 

5.3. 2. 5 Safe all solid propellant-containing systems prior to ground instal 
lation and prior to recovering them into the Orbiter cargo bay in 
orbit. (H-16) 

5.3. 2. 6 Maintain in a passive or deactivated status experiment equipment 

capable of causing a hazardous situation upon their mere activation. 

Illustrative devices include: 

a. Balloons and inflating devices (H-ll) 

b. Reactive -fluid experimental equipment (H-22) 

c. Combustion- related equipment (H-l) 

d. Propulsion units (e.g.. Astronaut Maneuvering Unit, 
Maneuverable Work Platform) (H-13, H-14) 

e. The negative pressure source for the Lower Body 
Negative Pressure Chamber (H-l 2) 

5.3.3 Jettisoning/Dumping 

5.3.3. 1 Consider jettisoning or dumping experiment equipment whose 

status or condition poses an uncontrollable hazard affecting the 
safety of crewmen in the Experiment Module and/or the safety 
and integrity of the Orbiter and crew. 

Applicable equipment system areas include: 

a. Leaking containers (photochemicals, isotopes, 
serums, etc.) (H-18, H-21) 

b. Containers which exceed normal range values in 
temperature or pressure (H-22, H-23) 

c. Spark-chamber with leaking gases (argon, methane) 
(H-4) 

d. Booms/platforms /antennas (if their presence precludes 
any necessary docking, retraction, or Orbiter cargo 
bay door closure operations) (H-10) 
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e. Scientific airlock outer hatch door (if jammed 
open and not closeable) (H-6) 

f. Cryogenic or reactive fluid tanks (if their pressure 

or temperature exceeds normal range values) \ 

(H-22, H- 24) 

g. High-temperature devices (gas jets, combustors, 
furnaces )- -if their temperature or pressure limits 
are exceeded (H-l) 

h. EVA-use devices (Astronaut Manevering Unit, Maneu- 
verable Work Platform, teleoperator spacecraft)- -if 
their propulsion systems indicate malfunctions (H-13, 

H- 14, H-15) 

i. Automated satellite and propulsive stages (if propulsive 
malfunctions are indicated) 

j. The entire Experiment Module (Pallet, MSM, RAM)--if 
full and secure retraction cannot be accomplished, or in 
the event of any uncontrollable hazardous condition in the 
Module proper. 

5.3.4 Caution and Warning Systems 

5.3.4. 1 Incorporate Caution and Warning signals to alert the crew to 
hazardous and potentially hazardous conditions. 

Such systems (where appropriate) should include the capa- 
bility to record sensor measurement trends and compare 
these with predetermined trend predictions in order to pro- 
vide a timely warning of imminent hazardous conditions. 

Their display (visual and/or aural) and their location (on 
Orbiter flight deck or lower deck, or in an Experiment 
Module) depends on the particular hazard condition and 
severity. Applicable equipment and operational areas 
include: 

a. RF-field generation (H-17) 

b. Magnetic field generation (H-5) 

c. Excessive leakage rates through airlock doors (H-6) 

d. Status of overboard vent system components (pressure 
regulators, pressure-relief, etc.) including positive 
warning of vent malfunctions (H-2) 

e. Status of Experiment Module atmosphere with regard 
to pressure, temperature, humidity, and contaminant 
levels; positive warning with respect to incidence of 
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fire or contamination (toxic, non-toxic, smoke, 
chemical vapors, pollen, insects, radioactive ele- 
ments, biologicals, etc.) 

f. Positive warning if laser beam direction is out-of- 
limits (H-3) 

g. Extension or retrieval of booms/platforms/antennas 
and positive warning if active elements thereon are 
operational during docking, EVA, or Orbiter cargo 
bay door closure operations (H-10) 

h. Temperature and/or pressure level measurements, 
with positive warning if design range values are 
exceeded, for such items as: 

1. Batteries (H-19) 

2. Gas bottles (H-23) 

3., Cryogenic dewars (H-24) 

4. Non-cryogenic fluid containers (H-22) 

5. Gas jets, combustors, furnaces (H-l) 

6. Biological containers (H-21) 

7. Lower Body Negative Pressure Chamber (H-12) 

8. EVA-devices (Astronaut Maneuvering Unit, Maneu- 
verable Work Platform, teleoperator spacecraft), gas 
bottles, batteries, and propellant tanks (H-13, 

H- 14, H-15) 

9. Gas bottles and battery recharging apparatus (H-28) 

i. Radiation levels of X-ray machines, isotopes, radio- 
isotope thermal generator s (RTGs), etc., with positive 
warning if design range values are exceeded (H-17) 

j. Speed of rotating equipment, with positive warning if 
design range values are exceeded (H-8) 

k. Status of solid propellant safe-and-arm circuits (H-16) 

l. Status of PLSS conditions, with positive warning if 
conditions deviate from design range values (H-27) 

m. Status of airlock EC/LS, pressure levels, and door posi 
tions, including positive warning if design range values 
are exceeded (H-27, H-29) 

n. Velocity and alignment of a docking spacecraft relative 
to the Experiment Module or Orbiter docking port, 
including positive warning of any deviation from design 
range values (H-31) 



0. Position of erection/retraction system, with status 
as to fully erected, fully retracted (H-30) 

5.3.5 Monitoring and Control 

5.3. 5.1 Monitor and control, on a continuous or scheduled basis (as 

appropriate), operations/devices requiring immediate or con- 
current measures to prevent or counteract hazardous situations. 

Illustrative areas include: 

a. Gas bottle and battery recharging operations (H-28) 

b. Reactive fluid container pressure and temperature 
while aboard the Orbiter or in the immediate vicinity 
(H-22, H-24) 

c. The condition and operability of cage feeding and 
cleaning devices (H-21) 

d. Radiation levels of active radiation devices in Or 
attached to the Experiment Module (H-17) 

e. Human centrifuge operations (H-8) 

f. EVA equipment operations (Astronaut Manevering Unit, 
Maneuverable Work Platform, teleoperator spacecraft) 
(H-13, H- 14, H-15) 

g. EVA operations (H-27) 

h. PLSS conditions during EVA operations (H-27) 

1. Airlock and crew conditions during airlock egress 
operations (H-29) 

j. Docking sensors and control systems during docking 
operations (H-31) 

k. Erection/ retraction control system and status sensors 
throughout erection/retraction operations (H-30) 

l. The total radiation level environment to which the Orbiter 
and Experiment Module have been subjected due to both 
natural radiation spectrums and experimental equipment 
operation. Utilization of dose- accumulation badges by 
the individual crew members would facilitate the moni- 
toring of their individual exposures. (H-17) 
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6. REMEDIAL MEASURE ASSESSMENT 


6. 1 POTENTIALLY UNRESOLVED HAZARDOUS SITUATIONS 

Regardless of the care and attention given to spacecraft design and redundancy 
features, and despite the incorporation of meaningful preventive measures, 
hazardous situations can and will occur in space operations. This prospect is 
as applicable to in- space experiment programs as to any other space activity. 
In order to identify possible means for remedying the situation after the occur- 
rence of a hazard, a series of remedial measure assessments was performed. 
These assessments were based on the inherent hazard source lists (Figures 
3-3 and 3-4) and were keyed to the potentially hazardous results as described 
in Tables 3-32 and 3-33. 

The approach followed in the assessment was to graphically display and relate 
a basic hazard source and its attendant hazardous results to a subjective 
analysis and assessment of meaningful measures which could potentially: 

a. prevent further propagation of a hazard 

b. neutralize the effects of a hazardous occurrence 

c. provide needed: 

1 . physical aid 

2. medical aid 

3. metabolic sustenance 

d. provide for transfer to a haven of safety, if required 

The analysis was focused on identifying both remedial equipment and its 
associated operational or functional requirements in the above areas. 

The assessment technique is illustrated in Figure 6-1 for the case of over- 
board vent malfunctions and related experiment operations. In the case 
illustrated, four equipment- related measures and three ope rations- related 
measures were identified. 

For the total hazard source spectrum so analyzed, a total of 1 1 basic 
remedial need areas were identified. Table 6-1 summarizes these 11 
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Remedial Measure Assessment - Overboard Vent Malfunctions 




categories and indicates their applicability with regard to the 12 hazard/ 
emergency groups presented in section 3.2.2. 

The formulation of methods of implementing such remedial measures is 
presented in section 6.2 in terms of statements which delineate potential 
equipment and operational requirements and relate them to pertinent or 
example hazardous situations to which each remedial measure may apply. 

6.2 REMEDIAL MEASURE STATEMENTS 

The following remedial measure statements are summary expressions which 
emphasize areas deserving further consideration in order to enhance in-space 
experiment safety. Specifically, they refer to particular features or provisions 
of remedial measures which should be given consideration during the configura- 
tion selection and design process associated with scientific experiments in 
connection with the Space Shuttle Orbiter. 

These remedial measures were initially identified in the series of remedial 
measure assessments described in section 6. 1. For convenience of presenta- 
tion the remedial measure statements are grouped according to the basic 
remedial need areas of Table 6-1. 

Where appropriate, the remedial measure statement (or accompanying example 
of equipment/experiment/condition exemplifying the statement intent) contains 
a reference to the particular Hazard/Emergency Analysis and Safety Criteria 
Summary Sheet of Table 5-1, which contains the basic hazard/emergency 
assessment used to form the basis of the remedial need. 

It is emphasized that the remedial measures, as stated, in many cases are not 
singular remedies, but require corollary or complementary activities. For 
example, if a crew member were injured and required medical aid, there may 
also be the requirement for emergency access equipment to reach the injured 
party and the need for crew aid and retrieval personnel and equipment to effect 
his transfer to another compartment or spacecraft module. The formulation of 
selected remedial measures into summary Safety Guidelines is presented in 
Table 4-3 of Volume II, Part 2. 
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Fire Suppression 

In addition to normal fire- suppres sion provisions, consideration 
should be given to providing fire- suppression devices (e.g. , "fire 
extinguishers") and/or systems (e. g. , controlled chamber decom- 
pression techniques, inert gas purge systems, etc.) suitable for 
those unique combustibles introduced by the nature of the experi- 
ment and for which the normal equipment would not be suitable. 

Selection of fire suppression device /system type, configuration, 
and operational characteristics should be compatible with the 
features and characteristics of the particular spacecraft in 
which it is installed and reflect consideration of its use by 
crew members in the spacecraft or it’s use by remote control 
and activation from the Orbiter (in the case of Pallet, MSM, 
or RAM Experiment Modules). The fire- suppression character- 
istics of selected devices /systems should reflect the range of 
potential on-board ignition sources and flammable contents 
sources which include: 

a. Electrically- powered equipment (H- 20) 

b. Closed vent explosions (H-2) 

c. Spark- chamber gas leakage (H-4) 

d. Film processing chemicals (H-18) 

e. Lasers (H-3) 

f. Batteries (H-19) 

g. Gas bottle explosions (H-23) 

h. Cryogenic dewar ruptures (H-24) 

i. Non- c ryogenic dewar ruptures (H-22) 

j. Non- cryogenic gas escape (H-23) 

k. Solid propellants (H-16) 

l. Gas jets, combustors, furnaces (H-l) 

m. . Liquid metals , glasses (H-l) 

Emergency EC/LS 

Provide short term life support within EM' s (e.g., face mask 
breathing devices, portable self-contained "plug-in" EC/LS units, 
interior and exterior umbilical connections, etc. ) which is config- 
ured and located to provide ready access and limited term breath- 
ing atmosphere. 

Selection of emergency EC/LS device /system type , configura- 
tion, and operational characteristics should be compatible with 
the features and characteristics of the particular spacecraft 
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in which it is installed and/or reflect consideration of its 
use by crew members in the spacecraft or its use in a 
specific activity (e.g. EVA). The environmental and life 
support characteristics of selected devices /systems should 
reflect the range of potential situations and conditions which 
may require their use. Such conditions include: 

a. Experiment Module atmosphere composition, temper- 
ature, humidity, and pressure extremes due to: 

1. Basic EC/LS system malfunction 

2. Fire, smoke 

3. Contamination 

a. Toxic gases (H-23) 

b. Film processing chemicals (H-18) 

c. Cryogenic gases (H-24) 

d. Non- cryogenic gases (H-23) 

e. Bacteria (H-21) 
f . Radiation (H-17) 

g. Pollen (H-21) 

h. Waste products (H-21) 

i . Miscellaneous chemicals (H-21) 

4. Decompression/overpressure 

a. Laser beam damage to structure (H-3) 

b . Open/leaking scientific airlock doors (H-6) 

c . Rotating equipment damage to structure (H-8) 

d . Uncontrolled vacuum source for the Lower 
Body Negative Pressure Chamber (LBNPC) 
(H-12) 

e. Balloon inflation in Module (H-ll) 
f . Overboard vent malfunction (H-2) 
g. Collisions (H-7) 

b. Depleted or depleting EC/LS supply due to: 

1. Inability to return from EVA (H-27) 

2. Stranding in RAM 

3. Entrapment in airlock (H-29) 

4. Entrapment in MSM (H-29) 


6.2.3 


Medical Aid 


Provide medical supplies, equipment, and personnel trained in 
performing physician's duties for potential injury/illness 
conditions caused by experiments. 

Supplies/equipment selection and location should reflect 
consideration of the nature of the injury to be' treated, 
where the injury can occur, and the rapidity with which 
the illness /injury should be treated. Examples of potential 
injuries /illnes ses to be considered include: 

a. High-voltage shock (H-20) 

b. Electrical burns (H-20) 

c. RF-field exposure injury (H-17) 

d. Magnetic field exposure injury (H-5) 

e. Metabolic deprivation 

f. Explosion injuries 

g. Toxic gas inhalation (H-23) 

h. Chemical injury, burns (H-l) 

i. Eye damage (from looking at sun) (H-9) 

j. Laser injuries (burns, radiation) (H-3) 

k. Cryogenic fluid contact (H-24) 

l. Emulsion contact or vapor inhalation (H-25) 

m. Combustor or furnace burns (H-l) 

n. Radiation injuries (field exposure, isotope contact) 
(H-17) 

o. Animal, insect bites (H-21) 

p. Biological disease (H-21) 

q. Bacterial exposure (H-21) 

r. Excessive negative pressure exposure (H-12) 

s. Rotating equipment impact injury (H-8) 

t. EVA injury (H-27) 

1 • Impact 

2. Negative pressure 
3 . Metabolic deprivation 
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u. Excessive physical stress 

1. Human centrifuge (H-8) 

2. Litter chair (H-8) 

3. Ergometer (H-8) 

6.2.4 Decontamination 

Provide equipment, supplies, and personnel trained in related 
operational techniques for the purpose of decontaminating 
spacecraft surfaces and atmosphere. 

Such equipment/supplie s selection and location should reflect 
consideration of the nature of the contaminant source, where 
the contamination can occur, and the rapidity with which 
the contaminant should be removed. Examples of potential 
contaminant sources to be considered include: 

a. Atmospheric contamination 

1. Toxic gases (H-23) 

2. Volatile processing chemicals (H-18) 

3. Plant pollens (H-21) 

4. Airborne bacteria (H-21) , 

5. Airborne waste products (H-21) 

6- Cryogenic gases (H-24) 

7. ,Non-cryogenic gases (H-23) 

8- Insects (H-21) 

9* Emulsion vapors (H-25) 

10. Ionizing radiation (H-17) 

1 1 . Powders 

b. Surface contamination 

1. Liquid and solid waste products (H-21) 

2. Processing chemicals 

(a) Liquids 

(b) Solids (powders, granules, etc.) 

3. Biological cultures, serums (H-21) 

4- Battery electrolyte (H-19) 

5. Cryogenic fluids (H-24) 
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6. Non- cryogenic fluids (H-22) 

(a) Toxic 

(b) Non-toxic 

7. Emulsions (H-25) 

8. Specific contaminant sources (H-26) 

9. Isotope solutions (H-17) 

Structure Repair 

Provide materials, equipment, and personnel trained in related 
operational techniques for the purpose of enabling emergency 
repair of damage to the primary pressure-containing shell of the 
spacecraft. 

Such repair would be limited to patching or reinforcing shell 
surface areas which had suffered minor or non- catastrophic 
openings and whose repair was essential to permit continued 
habitability until affected crew members could exit to a safe 
haven. Examples of typical sources of such structural damage 
include: 

a. Micrometeoroid penetration 

b. Minor /explosions 

c. Impact holes, cracks 

1. Rotating equipment (H-8) 

2. Exterior collisions (H-7) 

d. Laser beam holes (H-3) 

e. Uncontrolled negative pressure source (H-12) 

Removal Tools 

Provide tools, other equipment, and personnel trained in related 
operational techniques for the purpose of removing spacecraft 
equipment and/or appendages whose status or condition is such 
as to pose an immediate hazardous condition or to prevent the 
ability of the Orbiter to return to earth. 

Examples of equipment or appendages which pose this 
potential requirement include: 

a. Protuberances preventing closure of Orbiter 
cargo bay doors 

1. Scientific airlock outer doors (H-6) 

2. Extending instruments , deployment mechanisms 
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3 Booms /platforms /antennas (H-iO) 

4. Unretractable Pallet, MSM, RAM 

b. Malfunctions resulting in crew entrapment 
1. Telescope latching mechanisms (H-9) 

2 . Airlock doors 

c. Malfunction resulting in inability to undock an attached 
vehicle 

1. Docking mechanisms 

2. Astronaut Maneuvering Unit, Maneuvering 
Work Platform, and teleoperator spacecraft 
attach mechanisms (H-13, H-14, H-15) 

6.2.7 Access Equipment 

Provide emergency access equipment (cutting tools, knockout or 
blow-out panels, etc. ) for the purpose of enabling access to and 
the egress of crew members entrapped within airlocks or space- 
craft compartments. (H-29) 

6.2.8 Crew Transfer Equipment (Space Rescue) 

Provide equipment to enable transfer to the Orbiter of crew 
members stranded in EVA or in a vehicle unable to close- 
rendezvous and/or dock with the Orbiter (or attached MSM). 

(See also Volume II, Part 3, and Ref. 5 for detailed information. ) 

Such equipment selection should consider the potential need 
for transporting crewmen who are immobile and who require 
a pressurized atmosphere for survival. Typical situations 
which pose the requirement for such transfer equipment include: 

a. Astronaut stranded in EVA (H-27) 

b. Stranded Maneuvering Work Platform (H-14) 

c. Stranded RAM 

6.2.9 Crew Aid and Retrieval 

Provide personnel trained in the requisite operational techniques 
for immediate aid and assistance to injured, entrapped, or 
stranded crew members in the same or adjacent compartments 
or in EVA operations. 

Such personnel should be fully cognizant of all associated 
equipment and operational characteristics. Training 
emphasis should concentrate on speed of response to an 
emergency situation and techniques for retrieval of 
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disabled crew members who cannot participate in a 
rescue operation. 

Ground Facility Aid 

Provide aid at the launch and return facilities which is sufficiently 
broad to encompass the following emergency aid areas: 

a. Fire suppression 

b. Emergency life support 

c. Medical aid 

d. Decontamination 

e. Access tools, equipment 

f. Crew aid and retrieval 

g. Purging 

h. Cooling (e.g, , isotope systems) 

Sections 6.2.1, 6.2.2, 6.2.3, 6.2.4, 6.2.7, and 6.2.9 denote 
typical emergency conditions and sources which may form the 
basis for the remedial aid required in each area above. 
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7. EXPERIMENT INTERACTION SAFETY CONSIDERATIONS 


Performing experiments in connection with the Space Shuttle Orbiter could 
result in emergency situations of well-recognized categories. The presence of 
Experiment Equipment and its operations does not cause hazards that are sig- 
nificantly different from previously known space hazards. It does, however, 
introduce an extremely broad range of specific hazard sources which are 
additive to the hazards inherent in space operations. 

The number of discrete hazards that can occur due to equipment or operation 
of any experiment class (FPE) is related to the nature of the Experiment. 
Materials Science and Manufacturing Experiment Modules, for example, have 
more equipment of a hazardous nature than Earth Survey Experiment Modules. 
This class-to-class differentiation loses significance, however, when multiple 
experiment categories are integrated into any one Experiment Module. The 
definition of hazards with their resultant potential emergency situations have 
to be based on the equipment that will actually be used. The synergistic 
effects and the interactions between Experiment, Module, and Orbiter equip- 
ment and instrumentation must be considered in order to reach a complete 
definition of potential hazards and emergency situations attributable to a 
specific Experiment. 

The discussions in Section 3 regarding parameters affecting experiment safety 
were necessarily directed to first-order effects because the Experiments and 
their interfaces are not completely defined at present. Equally important 
from a safety standpoint are the hazards arising from less well defined poten- 
tial interactions due to the integration of the diverse Experiment Equipment. 
This section discusses interactions involving an Experiment and its operational 
equipment that could have an impact on the safety of the crew and the Orbiter. 

7. 1 EXPERIMENT -TO-EXPERIMENT INTERACTIONS 

Within a given scientific discipline, such as Astronomy, the number and 
characteristics of hazard sources varies as a function of the accommodation 
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mode (Pallet, MSM, or RAM). The number and types of scientific equipment 
which can be carried and operated depend on the available volume, weight 
limitation, and capacity for pressurization, thermal control, contamination 
control, etc. For multiple -experiment missions, there is also the variation 
in scientific and supporting equipment required for the different Experiments. 


The hazards associated with the Experiments and their equipment, as shown 
in Tables 3-32 and 3-33, lead to a formidable list of potential emergencies. 
The less demanding Experiments (in terms of both experiment and support 
equipment) produce fewer hazards, while more complex or multiple- 
experiment combinations produce a greater number of potential hazards. 


In addition to the hazard sources that exist for any discrete scientific Experi- 
ment Equipment, interference with other scientific or operational equipment 
can endanger safety. For example, field- coupling effects (magnetic, RF, 
nuclear, etc. ), which could produce synergistic interactions, and thus could 
activate or deactivate sensors, detectors, or control loops of other Experi- 
ment Equipment, could result in: 

a. Hazardous component/subsystem malperformance 

b. Erroneous sequencing of hazardous equipment operation 

c. Requirement for manual experiment operator control (to avoid 
hazardous occurrence) at a time when an operator is not available 
for such control 

d. Overloading of electrical power system 

e. Inadvertent start-up and/or shut-down of multiple Experiment 
Equipment 


7.2 EXPERIMENT -TO -MODULE INTERACTIONS 


Emergency situations could also be produced by interactions which are 
related to equipment configuration and placement within the Experiment 
Module (Pallet, MSM, RAM, etc. ) in which the equipment is carried and 
operated. Therefore, consideration must be given to: 


a. The density of packaging of Experiment Equipment within a 
Module 
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b. The environment within the Module (i. e., pressurized or 
unpressurized) 

c. Placement relative to Module (i. e. , whether "inside" Module 
or attached "externally") 

d. Degree of reliance on sensors, detectors, control loops, etc., 
which are experiment- specific equipment, or which are central 
equipment provided by the Module or the Orbiter 

e. Effects of special remedial means included in the Module (e. g. , 
special fire detection and suppression equipment) 

f. Start-up and shut-down procedures 

The conduct of scientific experiments in ground laboratories devoted to a 
variety of experiments generally allows separation of the different Experiment 
Equipment, provision for protective enclosures or walls between equipment 
and operators, and isolation of caution and warning detectors as well as con- 
trol loops from the primary power source and experiment control systems 
and stations. 

The comparatively small volume available for Experiment Equipment within 
a Module aboard the Space Shuttle Orbiter suggests centralization of auxiliary 
equipment, such as central power conditioning and control units, data process- 
ing units, caution and warning detectors and alarm systems, etc. , in order 
to maximize the number of experiment packages and equipment for any 
Module and mission. Such an approach is justifiable because it minimizes 
costs and maximizes the scope of experiment activity that can be undertaken 
during any one space mission. It could, however, lead to a safety problem 
because of interactions. Wall-to-wall experiment and control equipment, 
with its potential for hazardous interactions and synergistic effects, suggests 
that a careful and systematic systems integration approach for Modules 
housing Experiment Equipment should be followed. 

7.3 EXPERIMENT -TO-ORBITER INTERACTIONS 

The hazard-causing potential of Experiment Equipment can also provide inter- 
actions with the Orbiter operational equipment and cause direct hazards due 
to potential synergistic effects on diverse equipment within a Module or the 
Orbiter. 


All of the subsystems essential for the safety and well-being of the Orbiter 
and its crew can be detrimentally affected by Experiment Equipment either 
directly or indirectly, regardless of the location of the equipment. For 
example, the electrical power system could be overloaded or rendered in- 
operable; communications with other spacecraft and the ground could be 
interrupted or cut; the Orbiter guidance and navigation system could be 
rendered inaccurate or ineffective, etc. 

During experiment operations the orientation of the Experiment Module and 
Experiment Equipment with respect to the Orbiter is of importance. For 
example, the efflux from overboard vents could contaminate the cargo bay 
and/or sensitive Orbiter elements (lenses, sensors, etc. ). 

7.4 INTERACTION SUMMARY 

The experiment program foresees a large variety of Experiments aboard the 
Space Shuttle on any one flight. The multitude of interactions between the 
Experiment Equipment, and its operations. Accommodation Modules, experi- 
menters, and Shuttle Orbiter operational equipment and crew creates many 
potential hazards. Malfunctioning Experiment Equipment presents discrete 
hazard sources; the potential hazards created by them could propagate to 
other Experiment Equipment and supporting equipment and to operational 
equipment of the Accommodating Module and the Orbiter. 

Implementation of effective preventive or remedial measures to eliminate or 
reduce to an acceptable level the safety risk of such experiment- related 
hazards requires an integrated system approach. Such an approach demands 
the preparation and coordination of failure mode and effect analyses and 
safety plans which reflect the interfaces between the Experiment Equipment 
and other systems on board every individual Orbiter flight. Such plans 
must identify and consider all potential hazards introduced by the mutual 
interactions of: 

a. All Experiment Equipment and its operation 
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b. All supporting equipment (central controls, displays, detectors, 
etc.) installed in the Accommodating Module (e.g., Pallet, MSM, 
RAM, etc. ) and its operation 

c. Subsystems and Experiment support equipment of the Orbiter 
(e. g. , cargo bay doors, deployment and retrieval mechanisms, 
electrical power system, venting system, EC/LS, communica- 
tions system, etc. ) 

d. Operations required for performing particular Experiments 
(e.g., setup, deployment, retrieval, disposal, EVA, mainte- 
nance and repair, etc. ) 

The above effort must be carried out at three system levels, all of which 
must consider the Experiment Equipment operation. The first of these levels 
is the Experiment Equipment design level which must include considerations 
of operational safety. The second level is the integration of the Experiment 
Equipment carried and operated within the Accommodation Module. The 
third level is the integration of the Accommodation Module with the Space 
Shuttle Orbiter. The second and third levels must consider the stowed and 
deployed modes of the Accommodation Module and must consider the full 
spectrum of potential hazards created by the Experiments carried aboard the 
Orbiter and operated within it or nearby. These hazards should include 
considerations of synergistic effects. 

Included in all the above system levels, but particularly on the second and 
third levels, are considerations such as the choice of the central or multiple 
use of the control, conditioning, and detection systems (e.g., fire, leak, and 
contamination detection, etc. ). This choice must be based on safe operation 
under the diverse conditions arising during simultaneous operation of several 
Experiments and operational Orbiter equipment (either planned or accidentally). 
If there is the possibility that under certain combined operations a spurious 
signal could result in a false caution or warning alarm, such particular opera- 
tional modes should be excluded, or flagged for special considerations, such 
as selected operating time schedules. 
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Other considerations include damage control, safety trade-offs, jettisoning 
or dumping of hazardous equipment or materials, contingency plans, etc. 
The contingency plans, which must be established for every Space Shuttle 
Orbiter /Experiment Payload configuration, must include the planned emer- 
gency shutdown of equipment, consideration of the periods during which 
several (planned) Experiments will be in progress, emergency backout pro- 
cedures, etc. 
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8. SUMMARY 


Manned missions being considered for the future include the implementation 
of a wide variety of scientific and application payloads. Current definitions 
of a broad-based experiment program are portrayed and summarized in the 
Blue Book. Specific spacecraft designs which incorporate and implement 
some types of experiments are currently in progress. It is expected that 
additional experimental spacecraft designs will evolve in concert with experi- 
ment program implementation planning. 

A basic element for such experiment missions is the Space Shuttle, used not 
only for transportation to and recovery from low earth orbit, but also for 
payload deployment and retrieval and as a primary base of operations for 
an attached experiment payload. The identification of potential emergency 
situations created by carrying such Experiment Equipment aboard the Space 
Shuttle and the indentification of Safety Guidelines for eliminating or reducing 
hazards introduced by the Experiment Equipment and its operation was the 
subject of this study. 

This section provides a summary overview of some of the significant results 
presented in detail throughout the report. 

8. 1 INTERACTION CONSIDERATIONS 

The wide spectrum of potential Experiment Equipment, operations, and modes 
of accommodation inherent in a broad -based Space Shuttle experiment program 
results in a large number of potentially hazardous interactions between 
Experiment Equipment, experimenters, Accommodating Modules, and the 
Orbiter. Experiment Equipment and its attendant operational requirements 
represent discrete hazard sources which can propagate to other equipment 
(experimental or supportive) within the Accommodating Module or to the 
Orbiter proper, depending upon the nature of the hazardous occurrence. 
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Implementation of effective preventive or remedial measures to eliminate 
or reduce to an acceptable level the safety risk of such experiment-related 
hazards requires an integrated system approach for every individual 
Orbiter flight. Such an integration effort must be carried out at three 
system levels: 

1. The Experiment Equipment design level which must include 
considerations of integration and operational safety 

2. The integration of the Experiment Equipment carried and 
operated within the Accommodation Module 

3. The integration of the Accommodation Module with the Space 
Shuttle Orbiter 

The second and third levels must consider the stowed and deployed modes of 
the Accommodation Module and must consider the full spectrum of potential 
hazards created by the Experiments carried aboard the Orbiter and operated 
within it or nearby, including their synergistic effects. 

Other considerations include damage control, safety trade-offs, jettisoning or 
dumping of hazardous equipment or materials, contingency plans, etc. The 
contingency plans, which must be established for every Space Shuttle Orbiter/ 
Experiment Payload configuration, must include the planned emergency shut- 
down of equipment, consideration of the periods during which several (planned) 
Experiments will be in progress, emergency backout procedures, etc. 

8.2 ACCOMMODATION MODE CONSIDERATIONS 

Nine basic or generic Experiment Module categories were examined for Experi- 
ment Equipment, contents, and related operational requirements. The specific 
equipment and operational requirements of these generic Experiment Module 
categories are influenced by the mode of accommodation of the module by the 
Orbiter. Accommodation modes examined included: 

a. attached MSM mode 

b. detached RAM mode 

c. attached Pallet mode 
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In some instances all accommodation modes are applicable to a single generic 
experiment category; the required Orbiter support functions, however, vary 
with the accommodation mode. Thus, one accommodation mode approach is 
not necessarily a competitive alternate to the other modes. Instead, selection 
would be made on the basis of whether the entire capability represented by the 
specific accommodation mode is desired and whether two or more experi- 
ment categories are to be simultaneously carried by the Orbiter. 

During non-operational periods (i.e., Experiment Equipment and support 
equipment in quiescent state during transport to and from orbit), the mode 
of accommodation would not appear to be a significant variable with regard 
to hazardous occurrences in that all Experiment Modules are located within 
the Orbiter Cargo bay. 

During on-orbit operational periods (i.e., when actual experimentation is 
taking place), the attached modes of accommodation (Pallet, MSM) would 
appear to represent a significantly higher hazard source level than the 
detached RAM mode (for the same Experiment Equipment contents). This 
is due solely to their attachment to and dependence on (in some cases) the 
Orbiter. 

8.3 HAZARDS AND EMERGENCY SITUATIONS 

The use of the Space Shuttle Orbiter for in- space experiment programs could 
result in the occurrence of emergency situations requiring remedial aid of 
well-recognized categories. The presence of Experiment Equipment and its 
attendant operations do not, in and of themselves, pose basic hazards that 
are significantly different from previously determined space hazards. They 
do, however, constitute an extremely broad range of specific hazard sources 
which are additive to the inherent hazard sources existing in space operations 
in general. 

The number of discrete hazard sources for a single Experiment class (FPE) 
is related to the nature of the Experiment. Materials Science and Manufactur- 
ing Experiment Modules, for example, have more hazardous equipment and 



contents than Earth Survey Experiment Modules. This class-to-class differ- 
entiation loses primary significance, however, when multiple experiment 
categories are considered for integration in a single Experiment Module. 

The definition of hazard sources and resultant potential emergency situations 
for such cases have to be based on the specific Experiment Equipment that 
will actually be used. Again, the synergistic effects of adjacent operational 
equipment and the interfaces between equipment, the Accommodating Module, 
and the Orbiter must be included for a complete definition of hazards and 
emergency situations attributable to a specific Experiment Module and Orbiter 
mission. 

8.4 PREVENTIVE MEASURES 

An extensive listing of preventive measures was identified which, if method- 
ically applied, could result in the elimination of the hazard sources or the 
avoidance of their occurrence. These measures treated the Experiment Mod- 
ule, scientific and support equipment, and any ancillary contents or materials 
required on the conduct of the experiments. The measures identified design 
features, provisions, locational features, and operational techniques which 
should be given consideration and traded- off during the configur.ation selec- 
tion and design process. 

The formulation of these measures into summary Safety Guideline statements 
serving to emphasize these areas deserving of further consideration as pre- 
ventive measures is presented in detail in Volume II, Part 2. 

It is emphasized that these measures are not complete solutions, in and of 
themselves, for the prevention of hazardous occurrences. Rather, they are 
both general and specific items which should be fully addressed, treated, and 
traded-off during the origination and coordination phases of the development 
of failure analyses and safety plans attendant to the system integration of 
in- space experiments with the Space Shuttle. 
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Effective consideration of all viable preventive measures is especially 
important if the trend develops to configure Experiment Modules with the 
maximum possible number of experiment and supportive equipments per 
given Module volume. Not only are the number of discrete hazard sources 
per Module increased in this case, but the possibility of interactive or 
synergistic reactions may also be increased. 

8.5 REMEDIAL MEASURES 

Ten basic remedial measures were identified which could result in remedying 
an emergency situation after the occurrence of a hazard. These measures 
were selected on the basis of the potential to: 

a. prevent further propagation of a hazard 

b. neutralize the effects of a hazardous occurrence 

c. provide needed: 

(1 ) physical aid 

(2) medical aid 

(3) metabolic sustenance 

d. provide for transfer to a haven of safety, if required 

The identified remedial measures encompassed both remedial equipment and 
their associated operational or functional requirements in the areas listed in 
Table 6- 1 . 
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AMU 

E 

EC/LS 

EE 

EM 

FPE 

LBNPC 

MSM 

MWP 

Pallet 

RAM 

RTG 

SOAR 

Sortie 

sub- FPE 


10. SYMBOLS AND ABBREVIATIONS 


Astronaut Maneuvering Unit 
Experiment 

Environmental control and life support system 
Experiment Equipment 

Experiment Module; a spacecraft element containing or housing 
principal experimental equipments and experimenters (when 
involved). Can be a Pallet, an MSM, or a RAM in configuration. 

Functional program element; a grouping of experiment classes, 
or research activities within a particular discipline of research. 

Lower Body Negative Pressure Chamber; a medical research 
equipment. 

A mission- support- module within which research is conducted 
in a pressurized environment by man. 

Maneuverable Work Platform 

A structure upon which experimental equipment is mounted. 
Research Application Module containing experimental equipment. 
Radioisotope thermal generator 

Shuttle Orbital Applications and Requirements; a study conducted 
by McDonnell Douglas for NASA. 

A mission class encompassing the conduct of orbital research 
with the Shuttle system. 

Payload elements within an FPE grouping 
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Table 2-1. FPE Requirements Summary (Ref. 1) (1 of 2) 
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Table 2-1. FPE Requirements Summary (Ref. 1) (2 of 2) 
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Table 2-2. Crew Skills (Ref. 1) 


1 . 

Biological Technician 

14. 

Optical Technician 

2. 

Microbiological Technician 

15. 

Optical Scientist 

3. 

Biochemist 

16. 

Meteorologist 

4. 

Physiologist 

17. 

Microwave Specialist 

5. 

Astronomer/ Astrophysicist 

18. 

Oceanographer 

G. 

Physicist 

19. 

Physical Geologist 

7. 

Nuclear Physicist 

20. 

Photo Geologist 

8. 

Photo Technician/Cartographer 

21. 

Behavioral Scientist 

9. 

Thermodynamicist 

22. 

Chemical Technician 

10.. 

Electronic Engineer 

23. 

Metallurgist 

11. 

Mechanical Engineer 

24. 

Material Scientist 

12. 

Electromechanical Technician 

25. 

Physical Chemist 

13. 

Medical Doctor 

26. 

Agronomist 



27. 

Geographer 
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Chambers 101 (230) 1,3 (65) 0.9 x 6.9 x 0.9 Nominal Thermodynamlcist Temperature Data generation rate s 

Tanks 89 (1951 (3x3x3) US 18 hours Nominally 291 K 10" 3 g 6.0 hr 25 blts/sec. Total 

fluids Methanol 2 54 (S60) Peak (70‘ F)- Control- )(>** g 6.0 data sampled = 1.62 • 

Ethanol 86 AMI 165 for 4 min led g level 10 * 5 g 6.0 10 fi ; film storage - 0 
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Table 2-4. EVA Experiment Requirements Summary (Ref. 1) 
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Table 2-5. FPE-Subgroup Analysis, Space Physics 
Example (Ref. 2) 




Experiment 

W eight 
kg (lb) 

Volume 
m 3 (ft 3 ) 

P-1 

Space Physics Research 
Laboratory (Space Station) 

1, 373. 0 

(3, 024) 

4. 47 

(159. 7) 

/ 

P-1A 

Atmospheric and Magneto 
Science 

292.4 

(644) 

1.16 

(41. 3) 


P- IB 

Cometary Physics 

105. 6 

(232. 5) 

0. 58 

(20. 6) 


P-1C 

Meteoroid Science 

40. 1 

(88. 5) 

0. 81 

(28. 9) 


P- ID 

Thick Material Meteoroid 

Penetration* 

• 

865. 0 

(1. 909) 

1. 47 

(48. 5) 

P-1E Small Astronomy 
Telescopes 

. 

Divided because of weight distribution 

96. 0 

(210) 

0. 51 

(18. 0) 
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Table 2-6. FPE-Sub-FPE Relationships (Ref. 2) 


Astronomy 


A- 1 X-Ray Stellar Astronomy 
A-2 Advanced Stellar Astronomy 

A-2A 

Intermediate Stellar Telescope 

A-3 Advanced Solar Astronomy 

A- 3 A 

1. 5m Photohcliograph/O. 25m XUV 
Sp«.ct roholiog raph/0. 5m X-Ray 
Telescope 

A-3B 

Solar Coronagraph 

A-3C 

I’hotoheliog raph 

A- 3D 

X-Ray Spcctroheliograph 

A-3E 

UV Long Wave Spectrometer 

A-4 Intermediate Size UV Telescopes 

A-4A 

0. 5m Narrow Field UV Telescopes 

A-4B 

0. 3m Wide Field UV Telescopes 

A-4C 

Small UV Survey Telescopes 

A- 5 High Energy Astronomy 

A-5 A 

Lowor Enorgy Experiment 

A- 5 13 

Higher Energy Experiment 

A-6 IR Telescope 

Physics 


P-1 Space Physics Research Lab 

P-1A 

Atmospheric and Magneto Science 

P-1B 

Cometary Physics 

P-1C 

Meteoroid Science 

P-1D 

Thick Material Meteoroid Penetration 

P- IE 

Small Astronomy Telescopes 

P-2 Plasma Physics and Environmental 
Perturbation Lab 

P-2A 

Wake Measurements from Station 
and Booms 

P-2B 

Wake Measurements from Subsatellites 

P-2C 

Plasma Resonances 

P-2D 

Wave Particle Interactions 

P-2E 

Electron and Ion Beam Interaction 

P-3 Coantic Ray Physics Lab 

P-3 A 

Lab Without Total Absorption Device 

P- 3D 

Lab With Total Absorption Device 

P-3C 

Plastic/Nuclcar Emulsions 

P-4 Physics and Chemistry Lab 

P-4A 

Airlock and Boom Experiments 

P-4B 

Flame Chemistry and Laser Experiment 

P-4C 

Test Chamber Experiments 

Earth Survey 

ES-1 Earth Observation Facility 

ES-1A 

Meteorological and Atmospheric Science 

ES-1B 

Land Use Mapping 

ES-1C 

Air and Water Pollution 

ES-1D 

Resource Recognition 

ES-1E 

Natural Disasters 

ES-1F 

Ocean Resources 

ES-1G 

Minimum Payload 


COM/N'AV 

C/N- 1 Communications /Navigations Facility 
C/N-1A COM/NAV Subgroup A 
C/N- 1 Li COM/NAV Subgroup B 


Materials Science and Manufacturing 
MS- 1 


MS-1LA 5- Day Group, Biological 

MS- 1IB 5-Day Group, Levitation 

MS- 1IC 5-Day Group, Furnace 

MS-lID 5- Day Group. Small and Low Temp 

MS-1IIA 30- Day Group 

MS- 1IID 30- Day Group 

MS- 1IIC 30- Day Group 

MS-1IIIA Space Station Group 

MS- 1IIIB Space Station Group 

MS- 1IIIC Space Station Group 

MS-1IIID Space Station Group 

MS- 1IIIE Space Station Group 


Technology 

T-l Contamination Measurements 
T- 1A Contamination Package 1 
T-1B Contamination Package 2 
T-2 Fluid Management 

T-2A Long Term Cryogonic Storage 
T-2B Short Term Cryogenic Storage 
T-2C Slosh Propellant 
T-2D Non-Cryogcnic Storage 1 
T-2E Non- Cryogonic Storage 2 
T-3 EVA 

T-3A Astronaut Maneuver Unit 
T-3B Manned Work Platform 
T-4 Advanced Spacec raft Systems Test 
. T-4 A Long Duration Systems Tests 
T-4B Medium Duration Tests 
T-4C Short Duration Tests 
T-5 Teleoperationa 
T-5A Initial Flight 
T-5B Functional Manipulation 
T-5C Ground Control 


Life Science 

LS- ST/A Minimal Medical Research Facility 
(Station) 

LS-ST/B Minimal Life Science Facility (Station) 
LS-ST/C Interim Life Science Facility (Station) 

ES-ST/D Dedicated Life Science Facility 
(Station) 

LS-SH/A 5- Day Life Science Facility (Shuttle) 
LS-SH/B 30-Day Life Science Facility (Shuttle) 
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TabLe 2-7. Candidate Blue Book RAM Payloads, Eight Free-Flying 
Research and Applications Modules (Ref. 2) 


Astronomy 

A- 1 

X-Ray Stellar Astronomy 


A- 2 

Advanced Stellar Astronomy 


A- 3 

Advanced Solar Astronomy 


A-4 

Intermediate Size UV Telescopes 


A- 5 

High Energy Stellar Astronomy 


A-6 

Infrared Astronomy 

Physics 

P-3 

Cosmic Ray Physics Laboratory 

Technology 

T-2 

Fluid Management 
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Table 2-8. Candidate Payload Subgroups (Ref. 2) 
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Table 3 - 1 . Experiment /Support Requirements — Astronomy- 
Modules, Attached MSM Mode (Sheet 1 of 2 ) 
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Table 3-1. Experiment/Support Requirements — Astronomy 
Modules, Attached MSM Mode (Sheet 2 of 2) 
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Table 3-2. Experiment/Support Requirements — Physics 
Modules, Attached MSM Mode (Sheet 2 of 2) 
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Table 3-4. Experiment/Support Requirements 
Comm/Nav Modules, Attached MSM Mode 
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Table 3-5. Experiment/Support Requirements — Materials and 
Manufacturing Modules, Attached MSM Mode 
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Table 3-7. Experiment/Support Requirements — Equipment Technology 
Modules, Attached MSM Mode (Sheet 1 of 2) 
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Table 3-7. Experiment/Suppor t Requirements — Equipment Technology 
Modules, Attached MSM Mode (Sheet 2 of 2) 
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Table 3-10. Experiment/Support Requirements — Cosmic 
Ray Physics Modules, Detached RAM Mode 
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Table 3-11. Experiment/Support Requirements — Fluid 
Management Modules, Detached RAM Mode 
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Table 3-12. Experiment/Support Requirements 
Life Sciences Modules, Detached RAM Mode 
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Table 3-14. Expe riment/Support Requirements 
Astronomy Modules, Attached Pallet Mode 
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ible 3 -16. Experiment/Support Requirements 
Earth Survey Modules, Attached Pallet Mode 
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Table 3-17. Experiment/Support Requirements 
Comm/Nav Modules, Attached Pallet Mode 
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Table 3-18. Experiment/Support Requirements 
Biological Module, Attached Pallet Mode 




























Table 3-20. Experiment/Support Requirements — Equipment 
Technology Modules, Attached Pallet Mode 



































Table 3-21. Hazards/Interactions (On-Orbit Phase) —Astronomy Modules, 

Attached MSM Mode (Sheet 2 of 2) 












































































































































Table 3-23. Hazards /Interactions (On-Orbit Phase) 
Earth Survey Modules, Attached MSM Mode 
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Table 3-24. Hazards/Interactions (On-Orbit Phase); 
Comm/Nav Modules, Attached MSM Mode 
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Table 3-25. Hazards/Interactions (On-Orbit Phase) — Materials 
and Manufacturing Modules, Attached MSM Mode 



161 
































Table 3-26. Hazards /Interactions (On-Orbit Phase) 
Contamination Modules, Attached MSM Mode 
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Table 3-27. Hazards /Interactions (On-Orbit Phase) — Equipment 
Technology Modules, Attached MSM Mode (Sheet 2 of 3) 
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Table 3-28. Hazards/Interactions (On-Orbit Phase) — Life 
Sciences Modules, Attached MSM Mode (Sheet 1 of 2) 
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Table 3-28. Hazards /Interactions (On-Orbit Phase)— Life 
Sciences Modules, Attached MSM Mode (Sheet 2 of 2) 




















168 




Table 3-29. Hazards /Interactions Summary (On-Orbit Phase) 
Attached MSM Mode (Sheet 2 of 8) 
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Table 3-29. Hazards /Interactions Summary (On-Orbit Phase) 
Attached MSM Mode (Sheet 4 of 8) 



I 



Potential Effect On 

Orbiter 

Requirement 

Medical aid 

Retrieve crew 
Jettison module 

Medical aid 

Decontamination 

equip. 

Retrieve crew 
Fire suppression 
equip. 

Jettison module 
Ground rescue 

Medical aid 

Decontamination 

equip. 

Retrieve crew 

Fire suppression 
equip. 

Ground rescue 

Condition 


Potential fire 

Structural damage 
(unsafe to reenter) 

Potential fire 

Structural damage 
(unsafe to reenter) 

Module 

Requirement 

- 

First aid 
Decontaminate 

Egress 

First aid 

Decontamination 

equip. 

Egress 

Fire suppression 
equip. 

First aid 

Decontamination 

equip. 

Egress 

Fire suppression 
equip. 

Condition 

Injured crew 
Contamination 
/ Atmosphere 
Non -habitable 

Injured crew 
Contamination 

Non-habitable 
Fire in module 

Injured Crew 
Contamination 

Non-habitable 
Fire in module 

Potential 

Result 

Closed vent --tank 
overpressure, rupture: 

/ Cryo fluids, gases 
Spills, leaks 
/ Inadvertent 

Inadvertent interior 
release of fluids, fumes 
/ Injury 
/ Fire 
/ Explosion 
Contamination 
Uncontrolled combustion 
/ Fire 
/ Explosion 

Interior release or 
venting of gases 

Tank rupture 
/ Explosion . ' 

/ Injury 
/ Fire 

Potential Hazard Source 

Operations 

1. Supercooled magnet 
operations 

/ LHe dewar 

2. Venting of cryogenic 
boiloff gases 

1. Cometary physics 
exp. 

/ ICN cannisters 
/ NHj cannisters 

2. Zero- g combustion 
experiments 

/ Fuel and oxid. 
tanks 

3. Mat'ls and mfg. 
experiments 

/ Open storage 
fluids 

4. MWP with N^H^ 

RCS propulsion 

5. Specimen preserva- 
tion 

/ Embalming fluid 

6. Specimen feeding 
/ Nutrients 

/ Water 
/ Fluid waste 

1. Propellant tank 
pres surization 
(N 2 . He) 

2. Subaatellite maint. 

/ Gas bottle 

recharging 

3. Opening experiment 
containers (pres, 
with N 2 ) 

Equipment /Contents 

u 

e 

v n a 

“ X Z 

h . 

O (M 

M. Non-Cryogenic 
FluidB 

1. ICN 

2. NH 3 

3. N 2 H 4 

4. Other propellants 
. 5. Embalming fluids 

6. Nutrients 
(animal, plant) 

7. Waste products 

N. Non-Cryogenic Gases 

1 . o 2 

2. N, 

3. He 

4. Argon 

5. Methane 

(more) 
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Table 3-29. Hazards/Interactions Summary (On-Orbit Phase) 
Attached MSM Mode (Sheet 5 of 8) 
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Table 3-29. Hazards/Interactions Summary (On-Orbit Phase) 
Attached MSM Mode (Sheet 6 of 8) 
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Jettison module 


































Table 3-29. Hazards/Interactions Summary (On-Orbit Phase) 
Attached MSM Mode (Sheet 7 of 8) 
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Table 3-29. Hazards/Interactions Summary (On-Orbit Phase) 
Attached MSM Mode (Sheet 8 of 8) 
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Table 3-30. Hazards/Interactions Summary (On-Orbit Phase) — Detached RAM Mode 

(Sheet 2 of 5) 
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Table 3-30. Hazards/Interactions Summary (On-Orbit Phase) — Detached RAM Mode 

(Sheet 4 of 5) 



Jettison module 



































Table 3-30. Hazards/Interactions Summary (On-Orbit Phase) — Detached RAM Mode 

(Sheet 5 of 5) 
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Table 3-31. Hazards/Interactions Summary (On-Orbit Phase) — Attached Pallet Mode 

(Sheet 1 of 5) 



Etc. Optical scope pointed none -- remote operation 
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Table 3-32. Summary of Hazard Source, Causation, and Interaction Results 
Equipment/ Contents — Related Hazard Sources (Sheet 2 of 8) 


t 
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Table 3-32. Summary of Hazard Source, Causation, and Interaction Results 
Equipment/Contents — Related Hazard Sources (Sheet 3 of 8) 
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Table 3-32. Summary of Hazard Source, Causation, and Interaction Results 
Equipment/Contents — Related Hazard Sources (Sheet 4 of 8) 
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Table 3-32. Summary of Hazard Source, Causation, and Interaction Results 
Equipment/Contents — Related Hazard Sources (Sheet 5 of 8) 
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Table 3-32. Summary of Hazard Source/ Causation, and Interaction Results 
Equipment/ Contents — Related Hazard Sources (Sheet 6 of 8) 



I 
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Table 3-32. Summary of Hazard Source, Causation, and Interaction Results 
Equipment/ Contents — Related Hazard Sources (Sheet 8 of 8) 
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Table 3-33. Summary of Hazard Source, Causation, and Interaction Results 
Operations — Related Hazard Sources (Sheet 1 of 3) 
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Table 3-33. Summary of Hazard Source, Causation, and Interaction Results 
Operations — Related Hazard Sources (Sheet 2 of 3) 
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crew in module during pre-launch phase. 
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crew in module during ascent phase. 




Table 3-37. Emergency Situation Applicability, On-Orbit Phase 
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Debris in vicinity 




202 


module during return phase. 




Table 3-39. Emergency Situation Applicability, Post-Flight Phase 
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Abandonment (crew in EVA) 




Table 5-1, H-i. In-Space Experiments - Hazard /Emergency 

Analysis and Safety Criteria 


HAZARD SOURCE J Hi -Temperature Sources 

A number of high temperature sources are present in the form of gas jets, combustore, 
furnaces, fire sensing and suppression module and resultant liquid metals and glasses in 
manufacturing experiments. (See also H-2, H-20, H-22, H-23, and H-24 for related hazard 
sources.) 


■2Z 




CAUSATIVE EVENT/FACTOR/CONDITION 


H-I , 


Pallet 


MSM 


RAM 


Orbiter 


Combustor or jet burn-through, uncontrolled combustion, and inadvertent release 
are principal causative factors. 

of hot or toxic gases and liquids 

HAZARDOUS RESULT ] 

HAZARD/EMERGENCY GROUPS 

Uncontrolled combustion can result in explosions. 

Combu.:tor burn-through can result in injury, fire, or contamination. 

Spillage of liquid metals, glasses, vaporized substances can also result in fire, 
injury, and contamination of surfaces and atmosphere. 

Fire, injury, explosion, 
contamination 


PREVENTIVE MEASURES 


A. Design Features 


1. Provide overboard vent systems, including pre ssure -regulation and pressure relief 
subsystems . 

2. Provide capability to purge high -temperature devices. 

3. Provide protective covers to prevent inadvertent surface contact. 

4. Provide guards to prevent access to operational high-temperature equipment. 

5. Configure for ease of jettisoning. 

6. - Configure for remote deployment and remote operational control. 

7. Configure high -temperature equipment in integral or self-contained units. 


Reference 

Paragraph, 

Section 5 


5. 1.2.1 

5. 1.8.2 
5. 1.8.4 

5.1.9 

5.1.10 
5.1. 12.5 


B. Locational Features 

1. Locate high -temperature sources exterior to habitable Module compartments. 

2. If interior to the Module, locate high -temperature devices in special areas with spill 
containment, waste disposal, purge, and vent provisions. 

3. Orient the spark -chamber, gas jets, combustors, etc. so that an inadvertent bleed or 
efflux will not be directed toward the Orbiter or cargo bay. 

4. Locate equipment with hot surfaces away from other equipment in the same Module. 

5. Locate high -temperature equipment to facilitate jettisoning. 


C. Operational Techniques 

» 1. Wear protective garments, gloves, face masks, etc. when performing furnace -related 

operations . 

2. Perform combustion and furnace related experiments in a free-flying Experiment Module, 
deployed at a safe distance from the Orbiter. 

3. Remotely control high-temperature experiments. 

4. Employ caution and warning signals to indicate if high -temperature devices exceed design 
pressure or temperature limits. 










Table 5-1, H-2. In-Space Experiments - Hazard/Emergency 
Analysis and Safety Criteria 


HAZARD SOURCE | Overboard Vents 

The presence of cryogens, gas jets, combustors, furnaces, etc., and various life sciences 
holding and rearing accommodations necessitate venting various chambers overboard to provide 
pressure or environmental control during the experiment a). (See also H-l, H-2I, and H-24 for 
related hazard sources.) 




CAUSATIVE EVENT/FACTOR/CONDITION ] 

Closed or inoperative vents, cargo bay venting, and common vent sink locations are potential causative factors. 


X 

Pallet 

X 

MSM 

X 

RAM 

X 

Orbiter 


HAZARDOUS RESULT | 

HAZARD/EMERGENCY GROUPS 

Cryogenic tank overpressure/rupture releases cryo fluids, gases. 

Jet, furnace or combustor overpressure can release flames, toxic gases, liquid 

Fire, explosion, injury, 
contamination 

Cage overpressure and rupture can release animals, insects, plants, pollen, 
bacteria, waste products, etc.' 

Closed cargo bay venting can result in fire, explosion, or contamination. 

A common vent sink location can result in fire or explosion if the vent effluxes are 

reactive. 


Reference 
Paragraph, 
Section 5 


PREVENTIVE MEASURES 


A. ' Design Features 

1. Configure overboard vent systems to: 

a. avoid common exit sources or adjacent exterior locations 

b. prevent vent efflux from entering Orbiter cargo bay 

c. prevent efflux. in vicinity of Orbiter or Module sensors 

2. Incorporate accumulators to permit controlled venting during critical operational periods. 

3. Incorporate automatic interlocks which prevent operation of equipment requiring an 
operative vent, in the event of vent malfunction. 

B . Locational Features 

1. Locate the terminals . of overboard vents such that vent efflux will not enter the Orbiter 
cargo bay. 

2. Locate the terminus of overboard vents to avoid adjacent locations where reactive vent 
effluxes could combine. 


C. Operati o nal Techniques 

1. Purge the Orbiter cargo bay in the event of inadvertent efflux release into the bay by 
Module overboard vents. 

2. Employ caution and warning signals to indicate status of vent system components and give 5. 3. 4.1 
positive warning of component malfunctions. 
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Table 5-1, H-3. In-Space Experiments - Hazard/Emergency 

Analysis and Safety Criteria 


HAZARD SOURCE | LaaerB 

Several experiments utilize laser-radar equipment for tracking balloons, subsatellites, etc. 
Specific laser experiments are included in the Physics FPE. 

Experiment Groupa: P-2, -4; C/N-l; T-3 j 


CAUSATIVE EVENT/FACTOR/CONDITION 


Inadvertent exposure of crew, equipment, or structure to the laser beam is the principal causative event. 


HAZARDOUS RESULT | 

Such beam exposure can potentially result in fire, injury, equipment damage, 
or a hole in the Module structure. 


PREVENTIVE MEASURES 


A. Design Features 


1. Provide radiation shields to protect crew and sensitive equipment from laser radiation, 

2. Select source strength compatible with crew and nearby equipment. 

3. Incorporate automatic interlocks to shut down laser if field intensity exceeds design 
range values. 

4. Incorporate manual interlocks to prevent inadvertent laser activation. 

5. Provide stops to limit the directional movement of the laser beam. 

6. Provide guards to prevent access to laser equipment when it is in operation. 

7. Interpose a material means (for absorbing laser beam energy) between the laser beam 
target and Module primary structure. . 

B. Locational Features 

1. Locate laser equipment exterior to habitable Module compartments. 

2. Position laser apparatus (if within the Module) such that: 

a. beam not aimed at vital equipment 

b. apparatus is away from normal crew passage routes 

c. a deliberate act or access movement is required to reach it 

C. Operational Techniques 

1. Employ caution and warning signals to indicate status of laser beam pointing direction 
and positive warning if beam direction is out -of -limits. 
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Table 5-1, H-4. In-Space Experiments - Hazard/Emergency 
Analysis and Safety Criteria 


HAZARD SOURCE I Spark-Chamber 


Device for measuring galactic and extragalactic radiation sources in hi-energy astronomy 
experiments. Utilizes Argon and Methane gases. (See also H-2, H-20, and H -23 for related 
hazard sources.) 


Experiment Groups: A -5 


CAUSATIVE EVENT/FACTOR/CONDITION 


Leakage or bleed of argon or methane gases with the Module or Orbiter cargo bay are causative factor 


HAZARDOUS RESULT | I HAZARD/ EMERGENCY GROUPS 

Leaks and spills can result in toxic gases, fire, or explosion in the Experiment I explosion, injury. 

Module or in the Orbiter cargo bay. contamination 


PREVENTIVE MEASURES { 

A. Design Features 

1. Configure spark-chamber for ease of jettisoning. 

2. Configure the spark-chamber and its associated argon and methane tankage in integral or 
self-contained units to facilitate remote storage and jettisoning. 

B. Locational Features 

1. Locate the spark -chamber exterior to habitable Module compartments. 

2. Locate spark -chambers to facilitate jettisoning. 

C. Operational Techniques 

1. Jettison spark -chambers with leaking gases or other malfunctions. 













Table 5-1, H-5. In-Space Experiments - Hazard/Emergency 
Analysis and Safety Criteria 


HAZARD SOURCE | Superconducting Magnet 

Cryogenically cooled superconducting magnets (in dewars) are indicated for certain Physics 
experiments. (See also H-24 for related hazard sources.) 


| No. H-5 


Pallet 



Experiment Groups: P3, P4 


CAUSATIVE EVENT/FACTOR/CONDITION 


The superconducting magnet provides an extremely high magnetic field strength in relation to its physical 
size and power input. This field strength, its location, and its possible instabilities are conditions which could 
precipitate hazardous results. 


HAZARDOUS RESULT J 

HAZARD/EMERGENCY GROUPS 

Excessive magnetic field strength or a location too close to habitable 
compartments or sensitive subsystems could lead to crew injury or malfunction 
of equipment permeated by the field. 

Basic subsystem malfunction, 
injury 


PREVENTIVE MEASURES | 

A. Design Features 

1. Select a field source strength compatible with the crew and nearby sensitive equipment. 

2. Incorporate automatic interlocks to shut down magnet if field intensity exceeds design 
range values. 

3. Avoid the use of magnetic tools, etc., when experiments having magnetic fields are 
incorporated in the Module. 

B. Locational Features 

1. Locate magnetic field devices away from field -sensitive equipment and habitable 
compartments. 


Reference 
Paragraph, 
Section 5 


5. 1.6.1 

5. 1.8. 1.1 


C. Operational Techniques 

1. Do not transport magnetic -field devices on same flight with solid propellant 
propulsive stages. 

2. Control the timing of experiments with magnetic fields to avoid adversely. affecting 
sensitive Shuttle .subsystems. 

3. Employ caution and warning, signals to indicate activation of magnetic -field devices. 













Table 5-1, H-6. In-Space Experiments - Hazard /Emergency 

Analysis and Safety Criteria 


HAZARD SOURCE 


Scientific Airlock a 


Several experiment categories require scientific airlocks for the deployment of instruments, 
sensors, aubsatellites, balloons, etc. from within a Module to an exterior position for release, 
observation, or other experimental procedures. 


E|jSS|g|gM 



inadvertent opening of inner and outer doors at 
i airlock, deployment mechanism malfunction. 





Pallet 

X 

MSM 

X 

RAM 



Orbiter 


time, failure of outer door to close, 


HAZARDOUS RESULT 


Leaking doors or inadvertent Simultaneous opening of both doors can lead to Losi 

loss of EC/LS and decompression in the extreme, with potential injury to deco 

affected crew members. — L£er 

Failure of the outer door to close, instrument "hang -up" in the airlock, or 

deployment mechanism malfunction in the extended position can prevent closure of the 
P/Lbay doors (upon retraction of the Module) and place the Orbiter in the position of 
being unable to reenter the earth's atmosphere. 


HAZARD /EMERGENCY GROUPS 
Loss of EC/LS, injury, 
decompression, inability to 


PREVENTIVE MEASURES | 

A. Design Features 

1. Incorporate means to ensure retraction of airlock deployment mechanisms. 

2. Incorporate manual interlocks to prevent simultaneous opening of inner and outer 
hatch doors. 

3. Configure airlocks and deployment mechanisms for ease of jettisoning objects which 
hang -up in airlock. 

B. Locational Features 

1. Orient scientific airlocks such that a jammed open outer door will not prevent Orbiter 
cargo bay door closure. 


Reference 
Paragraph, 
Section 5 


5. 1.7.1 
5. 1.8. 1.2 


C. Operational Techniques 

1. Jettison outer hatch doors if not closeable. 

2. Employ caution and warning signals to indicate excessive leakage rates through airlock 
doors. 










Table 5-1, H-7. In-Space Experiments - Hazard /Emergency 
Analysis and Safety Criteria 
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Table 5-1, H-9- In-Space Experiments - Hazard/Emergency 

Analysis and Safety Criteria 



A wide variety of telescopes -- optical, IR, UV, X-ray -- are utilised in the astronomy 
experiments. (See also H -6, H-18, H-20, and H -24 for related hasard sources.) 



Telescopes are normally passive in and of themselves. 

Malfunction of holding and rotating mechanisms and visual pointing operations are potential causative factors 
leading to hazardous results. 


HAZARDOUS RESULT | 

HAZARD/EMERGENCY GROUPS 

Failure of the latching mechanism in the locked position could result in 
crew member entrapment. 

Looking directly at the sun or reflected sunlight during visual pointing 
operations could result in eye damage. 

Injury, entrapment 


PREVENTIVE MEASURES | 

Reference 


Paragraph, 

A. Design Features 

Section 5 

1. Incorporate means to ensure that the telescope latching mechanism releases from the 

5. 1.7.1 

locked position. 


■ 2. Incorporate automatic interlocks to prevent use of direct -viewing telescope if oriented 

5. 1.8. 1. 1 

toward sun or reflected sunlight. 


3. Provide protective covers for direct-viewing telescopes to prevent eye damage from 

5. 1.8.2 

direct or reflected sunlight ("cover' 1 may be in fact a fast -acting filter). 


4. Provide emergency means for braking and holding rotatable telescopes. 

5. 1.8.9 


B. Locational Features 

1. Position rotatable telescopes so that a crew member can reach normal Module egress 5.2.2. 1 

ports with telescope locked in any position. 


C. Operational Techniques 

1. Employ caution and warning signals to indicate if optical telescopes are pointed at sun 5.3.4. 1 

or receiving reflected sunlight. 











Table 5-1, H-10. In-Space Experiments - Hazard/Emergency 

Analysis and Safety Criteria 



CAUSATIVE EVENT/FACTOR/CONDITION 


Catch failures or expanding mechanism failures which prevent retraction of the boom /platforms /antennas 
are causative factors. 


HAZARDOUS RESULT 


HAZARD/EMERGENCY groups 


If the boom/platform/antenna extended length is sufficient to preclude closing the Inability to reenter 
Orbiter P/L bay doors (after Module is retracted) the Orbiter will be unable to 
reenter the earth's atmosphere. 


PREVENTIVE MEASURES | 

A. Design Features 

1. Incorporate means to ensure the retraction of booms/platforms/antennas. 

2. Configure for ease of jettisoning in the event of failure to fully erect or to fully retract. 

B. Locational Features 

1. Locate booms/platforms/antennae away from EVA hatches. 

2. Locate booms/platforms/antennas away from docking ports. 


Reference 
Paragraph, 
Section 5 



C. Operational Techniques 

1. Jettison booms/ platforms /antennas if not retractable and their presence prevents cargo 
bay door closure. 

2. Employ caution and warning signals to indicate commencement of extension activities and 
positive warning if elements thereon are active. 











Table 5-1, H-ll. In-Space Experiments - Hazard/Emergency 

Analysis and Safety Criteria 



HAZARD SOURCEl Balloons 

Inflatable ballons (of ECHO type) are called for in wake measurement experiments in Plasma 
Physics FPE. (See also H-6 for related hazard sources.) 


Experiment Groups: 


CAUSATIVE EVENT/FACTOR/CONDITION 



The balloon material and the possibility of inadvertent inflation are principal causative factors leading to 
potential hazardous results. 


HAZARDOUS RESULT [ 

HAZARD/EMERGENCY GROUPS 

Balloons made from combustible materials are a source of fire. 

Inadvertent balloon inflation within a Module can cover EC/LS ports, the 
crewman's body, or prevent crewman freedom of movement. 

Inadvertent inflation in an airlock could result in an outer hatch door being jammec 
open, preventing Orbiter P/L bay door closure upon retraction of the Module. 

Fire, injury, loss of EC/LS, 
entrapment, inability to 
reenter 

1 


PREVENTIVE MEASURES | 

A. Design Fea tures 

1. Utilize safing mechanisms/devices for inflating means. 


Reference 
Paragraph, 
Section 5 


2. Incorporate manual interlocks to prevent inadvertent balloon inflation. 


B. Locational Features 

1. Locate balloons and their inflating devices exterior to habitable Module compartments. 

2. Keep balloons and inflating devices separate from one another until time for inflation. 












Table 5-1, H-12. In-Space Experiments - Hazard/Emergency 

Analysis and Safety Criteria 


No. H -1 Z 


HAZARD SOURCE 


Negative Pressure Source 


A negative pressure source is required for the Lower Body Negative Pressure Chamber 
(LBNPC) used for human biomedical research experiments. 


WA U-M. i .U TA'< * ' ! . /iV.U J i .1 1 . I.jJ ^ 


An uncontrolled vacuum source is the principal causative factor. 


HAZARDOUS RESULT \ 

An uncontrolled vacuum source could result in physical injury to the human 
research subject. 

In the extreme, an uncontrolled vacuum source could lead to cabin 
decompression. 


HAZARD /EMERGENCY GROUPS 
Injury, decompression 


PREVENTIVE MEASURES | 

A. Design Features 

1. Select a low pressure source no lower than required by LBNPC experiment requirements 
(avoid an uncontrolled vacuum source). 

2. Incorporate automatic interlocks to provide a controlled shutdown of the LBNPC if 
the permissible lower range pressure value i» exceeded. 

3. Incorporate manual interlocks to prevent inadvertent activation of the LBNPC. 

C. Operational Technique 

1. Employ caution and warning signals to indicate if the LBNPC lower pressure design limit 
is exceeded. 











Table 5-1, H-13. In-Space Experiments - Hazard /Emergency 

Analysis and Safety Criteria 


No. H-13 


HAZARD SOURCE | Astronaut Maneuvering Unit (AMU) (Backpack 

is utilized in Technology experiments. {See also H-19, H-23, H -27 for 
urces . ) 



CAUSATIVE EVENT /FACTOR /CONDITION | 

Subsystem malfunction is the principal causative factor (aside from EVA operations attendant to utilizing 
the AMU). 


X 

Pallet 

X 

MSM 

□ 

RAM 

L_ 

Orbiter 


HAZARDOUS RESULT | 

Oxygen bottle overpressure and explosion can result in fire and injury. 

Battery overpressure and explosion or electrolyte leakage can result in injury, 
fire, explosion, and contamination. 


HAZARD/EMERGENCY GROUPS 
Injury, fire, explosion, . 
contamination 


PREVENTIVE MEASURES | 

A. Design Features 

1. Incorporate means to ensure that any propulsion failure occurs in the non -thrusting mode. 

2. Incorporate manual interlocks to prevent inadvertent release of the AMU from the Module. 
■ 3. Configure the AMU for ease of jettisoning from the Module. 

4. Provide means for attaching and holding the AMU to the exterior of the Module. 

B. Locational Features 

1. Locate the AMU exterior to habitable Module compartments. 

2. Locate AMU so as to permit unimpeded egress from EVA hatch and to provide convenient 
access for use by astronaut in EVA. 

3. Locate the AMU to facilitate jettisoning. 


Reference 
Paragraph, 
Section 5 


C. Operational Techniques 

1. Conduct AMU operations in the tethered mode, to the maximum extent possible. 

2. Monitor AMU propulsion subsystems and deactivate if malfunction is indicated. 

3. Jettison the AMU from the Module if a propulsion system malfunction is indicated. 













Table 5-1, H-14. In-Space Experiments - Hazard/Emergency 

Analysis and Safety Criteria 


HAZARD SOURCE 


Manned Work Platform (MWP) 


A maneuverable open MWP is utilized in certain Technology experiments. (See also H-10, 
H-19, H-20, H-22, and H -23 for related hazard sources.) 



CAUSATIVE EVENT /FACTOR/CONDITION 

Subsystem malfunctions and incorrect docking conditions (excessive velocity, incorrect heading, etc.) are the 
principal causative factors (aside from EVA operations attendant to utilizing the MWP). 


HAZARD/EMERGENCY GROUPS 



PREVENTIVE MEASURES | 

A. Design Features 

1. Incorporate means to ensure that any propulsion failure occurs in the non-thrusting mode. 

2. Incorporate manual interlocks to prevent inadvertent release of the MWP from the Module. 

3. Configure the MWP for ease of jettisoning from the Module. 

4. Provide means for attaching and holding the MWP to the exterior of the Module. 

B. Locational Features 

1. Locate the MWP exterior to habitable Module compartments. 

2. Locate MWP so as to permit unimpeded egress from EVA hatch and to provide convenient 
access for use by astronaut in EVA. 

3. Locate the MWP to facilitate jettisoning. 


Reference 
Paragraph, 
Section 5 



C. Operational Techniques 

1. Perform MWP-controlled docking experiments with a free -flying Experiment Module, 
deployed at a safe distance from the Orbiter. 

2. Conduct MWP operations in the tethered mode, to the maximum extent possible. 

3. Monitor MWP propulsion subsystems and deactivate if malfunction is indicated. 

4. Jettison the MWP from the Module if a propulsion system malfunction is indicated. 
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Table 5-1, H-15. In-Space Experiments - Hazard /Emergency- 

Analysis and Safety Criteria 


X 

6 

2 

HAZARD SOURCE | Teleoperator S/C (Unmanned) 

X 

Pallet 

An unmanned remotely -controlled spacecraft for cargo manipulation and docking maneuvers is 
utilized in one Technology experiment. (See also H-10, H-19,'H-20, and H -23 for related 
hazard sources.) 

X 

MSM 

X 

RAM 



Orbiter 


CAUSATIVE EVENT/FACTOR/CONDITION [ 


Subsystem malfunction and incorrect docking conditions (excessive velocity, incorrect heading, etc.) are the 
principal causative factors. 


HAZARDOUS RESULT*] 

Gas bottle overpressure can result in fire, explosion, injury. 

Battery overpressure can result in fire, explosion, injury, contamination. 
Incorrect docking can result in a collision, with decompression an extreme 
result. 


PREVENTIVE MEASURES | 


A. Design Features 

1. Incorporate manual interlocks to prevent inadvertent release of the teleoperator S/C 
from the Module. 

2. Configure the teleoperator S/C for ease of jettisoning from the Module. 

3. Configure the teleoperator S/C for remote deployment from the Module. 

4. Provide means for attaching and holding the AMU to the exterior of the Module. 

B. Locational Features 

1. Locate the teleoperator S/C exterior to habitable Module compartments. 

2. Locate the teleoperator S/C so as to permit unimpeded egress from EVA hatch and to 
provide convenient access for EVA checkout. 

3. Locate the teleoperator S/C to facilitate jettisoning. 

C. Operational Techniques 

1. Perform teleoperator -controlled docking experiments with a free -flying Experiment 
Module, deployed at a safe distance from the Orbiter. 

2. Jettison the teleoperator S/C from the Module if a -propulsion system malfunction is 
indicated. 


Reference 

Paragraph, 

Section 5 

5. 1.8. 1.2 

5.1.9 

5.1.10 
5.1.11.3 

5.2. 1 
5. 2.5.5 

5.2.6. 1 

5.3. 1.2. 1 
5.3.3. 1 


HAZARD /EMERGENCY GROUPS 

Eire, explosion, injury, 
contamination, collision, 
decompression 
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Table 5-1, H-16. In-Space Experiments - Hazard/Emergency 

Analysis and Safety Criteria 

I No. H-16 j 


HAZARD SOURCE j Solid Propellants 

A variety of solid propellants are required (pyrotechnics, solid rocket motors, spin-up rockets, j I MSM 
etc.) for planned automated satellites and related propulsive stages. 

Experiment Groups: Automated Satellites b Propulsive Stages 1 


CAUSATIVE EVENT/FACTOR/CONDITION | 

The principal causative factor is inadvertent ignitor activation, whether by overt act, squib failure, RF-field, 
or magnetic field inducement. 


HAZARD/EMERGENCY GROUPS 



PREVENTIVE MEASURES 


A. Design Features 


1. Utilize safing mechanism/devices. 

2. Incorporate shielding to protect against inadvertent activation by exposure to permeating 
fie Ids. 

3. Incorporate manual interlocks to prevent inadvertent activation of devices containing 
solid propellants. 

C. Operational Techniques 

1. Safe all systems containing solid propellants prior to ground installation. 

2. Employ caution and warning signals to indicate changes in status of safe -and -arm 
circuits. 
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Table 5-1, H-17. In-Space Experiments - Hazard /Emergency 

Analysis and Safety Criteria 


HAZARD SOURCE | Radiation Sources 

Sources of on-board radiation include X-ray machines, radioisotopes, RTG, lasers, and 
RF-emitters in various physics, Comm/Nav, and Life Sciences experiments. (See also H-3 
and H -20 for related hazard sources.) 

Experiment Groups: P-2, -4; C/N-l; LS-1 , -2, -3, -4, -5 [ 


CAUSATIVE EVENT /FACTOR/ CONDITION 


An uncontrolled radiation source and isotope spillage are the principal causative factors. 



Pallet 

X 

MSM 

IB 

RAM 

a 

Orbiter 


HAZARDOUS RESULT j 

HAZARD/EMERGENCY GROUPS 

Uncontrolled radiation from X-ray, RTG, laser, or RF sources can cauBe human 
injury and result in the malfunction of sensitive equipment within the range 
of the radiation field. 

Contact with isotope spills can result in human injury and surface and atmospheric 
contamination. 

Injury, contamination, 
basic subsystem malfunction 


PREVENTIVE MEASURES | 

A. Design Features 

1. Utilize safing mechanisms/devices for reactor or isotope devices. 

2. Provide radiation shielding to protect crew and sensitive equipment. 

3. Select a source strength compatible with the crew and nearby sensitive equipment. 

4. Incorporate automatic interlocks to shut down generators if field intensity exceeds 
design range values. 

5. Incorporate manual interlocks to prevent inadvertent activation of radiation sources. . 

6. Configure devices for ease of jettisoning from the Modules in the event of uncontrolled 
radiation. 


1. Locate radiation sources exterior to habitable Module compartments. 

2. Locate radioisotope fluid containers in special areas with spill containment, waste disposal, 
purge, and vent provisions. 

3. Locate permeating field devices away from field -sensitive equipment and habitable 
compartments . 

4. Locate externally -mounted field generators away from EVA hatches. 

5. Locate radiation sources to facilitate jettisoning. 



C. Operational Techniques 

1. Wear radiation dose -accumulation badges to guard against excessive radiation accumulation. 

2. Do not transport permeative -field experiments on same flight with solid-propellant 
propulsion stages. 

3. Control the timing of experiments with magnetic or RF fields to avoid adversely affecting 
sensitive Shuttle subsystems. 

4. Employ caution and warning signals to indicate commencement of radiation source 
activation, and positive warning if design range values are exceeded. 

5. Continuously monitor and control the radiation levels of active radiation devices in or 
attached to the Experiment Module. 

6. Monitor and control the total radiation level environment to which the Orbiter and 
Experiment have been subjected (due to both natural radiation spectrums and 
experimental equipment). 


5.3. 1. 1. 1 

5. 3. 1.5.2 

5.3. 1.5.3 
5.3.4. 1 











Table 5-1, H-18. In-Space Experiments - Hazard /Emergency 

Analysis and Safety Criteria 


HAZARD SOURCE | Cameras and Equipment 

Various experiments rely on photography to record forms of data and require in-space 
processing of the film to facilitate the experimental evaluation. (See also H-2 and H-22 for 
related hazard sources.) 





CAUSATIVE EVENT/FACTOR/CONDITION 


Combustible materials, chemical spills, and film processing operations are principal causative factors. 


HAZARDOUS RESULT 


Fire can result from the ignition of film and photochemicals. 

Injury can result from the fire or from the handling of toxic chemicals. 
Surface and atmospheric contamination can result from chemical spills. 


HAZARD/EMERGENCY GROUPS 


Fire, injury, contamination 


PREVENTIVE MEASURES 


A. Design Features 


1. Provide capability to purge film -processing areas. 

2.. Incorporate manual interlocks to prevent inadvertent removal of covers or closures of 
photochemical containers. 

3. Provide photochemical containers with end closures, spouts, or caps with no-spill, 
positive sealing characteristics. 

B. Locational Features 

1. Locate film, photochemicals, and film vaults away from potential ignition source areas 
and remote from open habitable areas. 


Reference 
Paragraph, 
Section 5 



C. Operational Techniques 


1. ' Wear protective garments, gloves, masks, etc. during film handling or processing 

operations . 

2. Perform film processing operations in special work areas. 

3. Jettison leaking photochemical containers . 

















Table 5-1, H-19. In-Space Experiments - Hazard /Emergency- 

Analysis and Safety Criteria 


HAZARD SOURCE [ Batteries 

Batteries are required in certain experiments to power sensors and equipment. (See also X MSM 

H -2 and H -20 . ) 

X RAM 


CAUSATIVE EVENT/FA 




Battery shorts, electrolyte spills, and inadequate venting (overpressure) are principal causative facto 


HAZARDOUS RESULT 



HAZARD/EMERGENCY GROUPS 


Shorts near combustible materials cause fire. 

Electrolyte spills can result in chemical injury and contamination of spacecraft con 
surfaces and atmosphere. 

If overpressured, the battery can explode, resulting in fire, injury, and contamination. 


Fire, injury, explosion, 
contamination 


PREVENTIVE MEASURES 


A. Design Features 


1. Provide overboard vent systems, including pressure -regulation and pressure -relief 
subsystems. 

2. Provide protective covers to prevent inadvertent electric shock. 

3. Provide batteries with closures having no-spill, positive sealing characteristics. 

B. Locational Features 

1. Within the Module locate batteries in special areas with spill containment, waste disposal, 
purge, and vent provisions. 

2. Locate batteries away from potentially combustible materials or systems that could be 
damaged by escaping battery fluids. 


Reference 
Par agraph. 
Section 5 



C. Operational Techniques 


1. Utilize caution and warning signals to indicate if battery temperature or pressure levels 
exceed design range values. 












Table 5-1, H-20. In-Space Experiments - Hazard/Emergency 

Analysis and Safety Criteria 


HAZARD SOURCE 


Electrically -Powered Experimental Equipment 


All experiments require some form of electrically -powered apparatus. Examples include: 
inverters, pulsers, TV, furnaces, phototubes, spark -chambers , photomultipliers, accelerators, 
heaters, cameras, actuator mechanisms, controls, displays, etc. 

Experiment Groups: All 1 


CAUSATIVE EVENT/FACTOR/CONDITION 

Many devices employ high voltage; others provide an RF-field. With power off, capacitative devices can discharge 
inadvertently. With power on, the high voltage and RF sources are active, and shorts can result. Mere presence 
in the RF-field and touching or handling of equipment can also precipitate hazardous results. 


X 

PaUet 

X 

MSM 

X 

RAM 


Orbiter 


HAZARDOUS RESULT 


Shorts and hi -voltage discharge can precipitate fires. 

High RF-field intensity can result in physical injury to crewmen or cause a 
malfunction of nearby sensitive equipment. 

Mere touching or handling of active hi-voltage devices can result in electrical 
shock and burns. 


HAZARD/EMERGENCY GROUPS 


Fire, injury, basic subsystem 
malfunction 


PREVENTIVE MEASURES 


A. Design Features 

1. Configure electrical interface lines to fail-safe. 

2. Incorporate manual interlocks to prevent inadvertent activation. 

3. Provide protective covers to prevent electric shock. 

4. Incorporate discharge devices to de-energize high-voltage equipment. 

5. Prominently and permanently mark all equipment having high-voltage components to 
warn crew and users. 

B. Locational Features 

1. Locate high-voltage equipment away from EVA hatches. 

2. Place high-voltage components in zones not normally accessible, so that knowledgeable 
acts are required to reach or touch them. 

C. Operational Techniques 

1. Neutralize (discharge) all high-voltage components after ground checkout and/or 
operation. 
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Table 5-1 


H-21 


. In-Space 
Analysis 


Experiments - Hazard/Emergency 
and Safety Criteria 


d>- 


HAZARD SOURCE 

Biologicals/ Animals /Insects / Plants 


Pallet 

A wide spectrum of cells and tissues, organisms and cultures, animals (primates, rats, mice, 
marmots, etc.), insects, and plants are required to support the Life Sciences experiments. 
(See also H-2, H-17, and H-22 for related hazard sources) 

X 

MSM 

X 

RAM 

Experiment Groups 

LS-2, -3, -4, -5 | 


Orbiter 


CAUSATIVE EVENT /FACTOR /CONDITION j 

The potentially toxic nature of certain biologicals, the animals and insects themselves, plant pollens, and chemical 
treatments, as well as the products associated with feeding requirements and waste (excreta, vomit, etc.) are the 
principal causative factors. The diverse handling requirements add another causative event potential. Malfunction 
of holding and rearing accommodations is yet another causative condition. 


HAZARDOUS RESULT 


Animal and insect bites can cause injury. The release of insects, pollens, 
serums, etc. can contaminate the atmosphere. The discharge of waste 
products into the atmosphere is also a contamination result. Mere contact with 
toxic biologicals or waste products can result in human injury /illness. 


HAZARD/ EMERGENCY GROUPS 


Injury, contamination 


PREVENTIVE MEASURES 


A. Design Features 

1. Provide overboard vent systems, including pressure-regulation and pressure -relief 
subsystems. 

2. Provide capability to purge any work areas for handling animals, insects, etc. 

3. Utilize safing mechanisms/devices for biological and radiobiological containers used in 
life sciences experiments. 

4. Provide thermal conditioning for biological containers (e.g. , incubation control). 

5. Provide independent environmental conditioning system for holding and rearing cages. 

6. Provide compartment with airlock and decontamination equipment for conduct of experi- 
ments with radioactive materials. 

7. Incorporate interlocks to prevent inadvertent opening of cage doors or isotope containers. 

8. Provide protective covers for biological containers to prevent release of contents. 

9. Configure cage feeding and cleaning provisions for remote operational control. 

10. Provide the cages with integral provisions for automatic feeding and cleaning. 

11. Provide containers or other provisions for preserving/storing dead animals, insects, 
plant specimens, etc. 

12. Provide biological and isotope storage containers with closures having no-spill, positive- 
sealing characteristics. 

13. Prominently and permanently mark all containers to identify nature of contents together 
with warning and handling notes (including antidotes, where appropriate). 

B. Locational Features 

1. Locate cage and cage rack assemblies and biological containers in special areas with spill 
containment, waste disposal, purge, and vent provisions. 

C. Operational Techniques 

1. Wear protective garments, gloves, masks, etc, when handling animals, biologicals, 
isotopes, serums, etc. 

2. Control cage feeding and cleaning operations remotely. 

3. Perform biological experiments and handling of animals, insects, toxic fluids, serums, 
etc. in special work areas. 

4. Jettison leaking containers (serums, etc.). 

5. Employ caution and warning signals to notify if biological containers exceed design range 
pressure or temperature. 

6. Monitor and control the condition and operability of cage feeding and cleaning devices. 


Reference 

Paragraph, 

Section 5 


5. 1.2. 1 
5. 1.3. 1 

5. 1.4. 1 
5. 1.4.2 
5. 1. 5.4 

5. 1.8. 1.2 
5. 1. 8.2 
5. 1. 10 
5. 1. 12. 1 
5. 1. 12.2 

5. 1. 12.6 


5.3. 1.3 
5. 3. 1.4 

5.3.3. 1 
5. 3.4. 1 
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Table 5-1, H-22. In-Space Experiments - Hazard/Emergency 

Analysis and Safety Criteria (1 of 2) 


No. H-22 


HAZARD SOURCE 

Non-Cryogenic Fluids 

X 

PaUet 

A wide variety of toxic and reactive fluids are required in the conduct of certain Physics, 
Materials and Manufacturing, Technology, and Life Sciences experiments. 

X 

MSM 

X 

RAM 

Experiment Groups: P-1, -4; MS - 1 ; T -2 , -3, -4, -5; LS-2, -3, -4, -5 ] 


Orbiter 


CAUSATIVE EVENT/FACTOR/CONDITION 1 


Cannister overpressure or rupture, and inadvertent leaks or spills during handling operations are principal 
causative factors. Uncontrolled combustion and combustor rupture is another factor. 


HAZARDOUS RESULT j 

HAZARD/EMERGENCY GROUPS 

Canniater rupture, combustor rupture, or the inadvertent release of reactive or 
toxic fluids or gases can lead to injury, fire, explosion, and contamination of 
surface s' and atmosphere. 

Fire, injury, explosion, 
contamination 



PREVENTIVE MEASURES | 

A. Design Features 

1. Provide overboard vent systems, including pressure-regulation and pressure-relief 
subsystems. 

2. Provide capability to purge areas containing fluid tanks, transfer lines, or outlets. 

3. Provide capability to purge tanks or containers holding non-inert liquids. 

4. Provide thermal conditioning for fluids affected by temperature extremes. 

5. Configure fluid interface lines to fail-safe. 

6. Configure propellant tanks and containerized fluids for ease of jettisoning from the 
Module, and for ease of jettisoning contents. 

7. Provide 'means for positively holding and securing transportable containers when not 
in actual use. 

8. Configure systems containing principally quantities of reactive fluids in integral or 
self-contained units to facilitate remote storage/deployment and jettisoning. 

9. Configure g aseous release devices and associated JCN and NH3 cannisters in integral 
or self-contained units. 

10. Configure the spark -chambe r and its associated argon and methane tankage is integral 
or self-contained units. 

11. Provide liquid containers with caps or closures having no -spill, positive -sealing 
characteristics . 

12. Prominently and permanently mark all containers to identify nature of contents, 
together with warning and handling notes (including antidotes, where appropriate). 

B . Locational Features 

1. Locate containers holding reactive or toxic fluids exterior to habitable Module 
compartments . 

2. Store cannisters requiring thermal conditioning in an area where their temperature 
limits will not be exceeded. 

3. Locate fluid cannisters in special areas with spill containment, waste disposal, purge, 
and vent provisions. 

4. Locate reactive fluid tanks non -adjacently and in different compartment areas. 

5. Locate containerized fluids and propellant tanks to facilitate jettisoning. 

C. Operational Techniques 

1. Wear protective garments, gloves, masks, etc. when handling toxic or reactive fluid 
containers . 

2. Perform propellant storage and transfer experiments in a free-flying Experiment 
Module, deployed at a safe distance from the Orbiter. 


Reference 
Paragraph, 
Section S 


5. 1. 1.1 

5. 1.2.1 

5. 1.2.2 
5. 1.4. 1 

5. 1.7.2 

5.1.9 

5.1.11.1 
5.1.12.5 
5.1.12.5 

5.1.12.5 

5.1.12.6 

5.1. 12.9 

5.2.1 

5. 2. 2. 3 

5.2. 2. 5 

5. 2. 4. 6 

5.2.6. 1 

5.3.1.12 

5.3. 1.2. 1 


3. Central reactive fluid experiments remotely. 


(more) 


5.3. 1.3 











Table 5-1, H-22. In-Space Experiments - Hazard/Emergency 

Analysis and Safety Criteria (2 of 2) 


HAZARD SOURCE 



i wrrmsm. 


C. Operational Techniques (continued) 

4. Establish order -of -connection procedures for all fluid connections. 

5. Purge, inert, and safe all returnable tanks/containers, 

6. Secure all containers in respective storage areas after use. 

7. Jettison containers which exceed design range values in temperature or pressure. 

8. Employ caution and warning signals to indicate if container design pressure or 
temperature limits are exceeded. 

9. Monitor and control reactive fluid container pressure and temperature while aboard 
the Orbiter or in its immediate vicinity. 


Reference 
Paragraph, 
Section 5 

5.3. 1.6. 4. 6 
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Table 5-1, H-23. In-Space Experiments - Hazard/Emergency 

Analysis and Safety Criteria 


HAZARD SOURCE 


Non -Cryogenic Gases 


A variety of non-cryogenic gases stored at high pressure are required for tank pressurization 
experiment -containment, environment, and propulsive functions in various Astronomy, Physics, 
and Technology experiments. 

~~~ A -5, -6; P-2, -4; T -1 , -2, -3. -4, -5 I 


CAUSATIVE EVENT /FACTOR/ CONDITION 



Tank overpressure or rupture and inadvertent leaks of inert, toxic, and reactive gases are principal causative 
factors. 



HAZARDOUS RESULT | 

Tank rupture or the inadvertent release of inert, toxic, and reactive gases can 
lead to injury, fire, explosion, and contamination of surfaces and atmosphere. 


PREVENTIVE MEASURES | 

A. Design Features 

1. Provide overboard vent systems, including pre ssure -regulation and pressure -relief 
subsystems. 

2. Provide capability to purge areas containing non-cryo gas tanks, transfer lines, or outlets. 

3. Provide capability to purge non-inert gas bottles. 

4. Configure gas interface lines to fail-safe. 

5. Configure high-pressure gas bottles for ease of jettisoning from the Module, and for 
ease of jettisoning contents. 

6. Configure high-pressure gas bottles for remote operational control. 

D. Locational Features 

1. Locate containers holding reactive or toxic gases, high-pressure containers, gaseous 

release devices, and the leak detection experiment Module exterior to habitable Module 
compartments. , 

2. Locate gaseous cannisters in special areas with purge and vent provisions. 

3. Locate high-pressure gas bottles to facilitate jettisoning. 

C. Operational Techniques 

1. Control the leakage detection experiment (GHe) remotely. 

2. Perform experiments with toxic gas or vapor contamination chemicals in pressure 
compartments with a separate environmental control system. 

3. Establish order -of -connection procedures for all gas connections. 

4. Purge, inert, and safe all returnable tanks /containers. 

5. Secure all containers in respective storage areas after use. 

6. Jettison containers which exceed temperature or pressure design values. 

7. Employ caution and warning signals to indicate if gas bottle design pressure or temperature 
limits are exceeded. 


HAZARD /EMERGENCY GROUPS 


Injury, fire, explosion, 
contamination 


Reference 
Paragraph, 
Section 5 
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Table 5-1, H-24. In-Space Experiments - Hazard /Emergency- 

Analysis and Safety Criteria 


H-21 


HAZARD SOURCE 


Cryogenics 


Inert cryogenics (LHe, LNe, LN^) are required in Astronomy and Physics experiments to cool 
various sensor devices; reactivate cryogenics {LO 2 , LH 2 ) are required in the Fluid Management 
FPE. (See. also H-2, H-5, and H-20 for related hazard sources. ) 


Experiment Groups: A-l, -5, -6; P-3, -4; T -2 


CAUSATIVE EVENT/FACTOR/ CONDITION 


Tank overpressure (closed vents, etc.)> line breaks, spills, etc, are principal causative factors. 


HAZARDOUS RESULT 


Inert tank overpressure and resultant rupture, and line breaks or spills can 
result in physical injury or Module contamination because of the release of 
cryogenic fluids and gases. Reactive tank overpressure and rupture, and line 
breaks or spills can result in fire, explosion, injury, and contamination of surfaces and atmosphere. 


HAZARD/ EMERGENCY GROUPS 


Fire, injury, explosion, 
contamination 


PREVENTIVE MEASURES 


A. Design F eatures 

1. Provide overboard vent systems, including pre ssure -regulation and pressure -relief 
subsystems. 

2. Provide capability to purge areas containing cryo dewars, transfer lines, or outletB. 

3. Configure cryogenic interface lines to fail-safe. 

4. Configure cryogenic dewars for ease of jettisoning from the Module. 

5. Configure cryogenic dewars and associated equipment (such as super -cooled magnet ) 
in integral or self-contained units to facilitate remote storage/deployment or 

■ jettisoning . 

B. Locational Features 

1. Locate cryogenic dewars and fluid transfer lines exterior to habitable Module compartments. 

2. Locate cryogenic dewars to facilitate jettisoning. 

C. Operational Techniques 

1. Perform propellant storage and transfer experiments in a free-flying Experiment 
Module, deployed at a safe distance from the Orbiter. 

2. Jettison dewars which exceed design range pressures. 

3. Employ caution and warning signals to indicate if dewar design pressure levels are 
exceeded. 

4. Monitor and control reactive, fluid container pressure and temperature while aboard the 
Orbiter or in its immediate vicinity. 


Reference 

Paragraph, 

Section 5 


5. 1.1.1 

5. 1.2.1 

5. 1.7. 2 

5.1.9 

5.1.12.5 


5.2.1 
5.2.6. 1 

5.3. 1.2.1 

5.3. 3.1 
5.3.4. 1 
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Table 5-1, H-25. In-Space Experiments - Hazard/Emergency 

Analysis and Safety Criteria 












Table 5-1, H-26. In-Space Experiments - Hazard /Emergency 

Analysis and Safety Criteria 



The mere presence of contamination products on samples, racks, or cleaning device is a causative condition. 
Cleaning operations of sensor surfaces is a causative event. 


HAZARDOUS RESULT | 

The deposit of such contaminants on spacecraft surfaces can result in contami- 
nation of the surface and atmosphere. 

The deposit of such contaminants on human skin can result in chemical injury. 


HAZARD/EMERGENCY GROUP S J 
Injury, contamination 


PREVENTIVE MEASURES | 

A. Design Features 

1. Incorporate manual interlocks to prevent inadvertent removal of the ACD end covers 
or closures. 

2. Provide protective covers for the ACD to prevent exposure to contaminants within the ACD. 

3. Configure the sample plates, holding racks, and the ACD for remote deployment. 

4. Provide grips for physical transport of Bample plates and racks (to avoid surface 
contact injury). 

5. Provide means for attaching sample plates and racks externally to Module. 

6. Configure EVA cleaning units (materials, waste disposal provisions, etc.) in integral 
or self-contained units to facilitate remote storage and jettisoning. 

7. Provide the ACD with end closures to retain contaminants within the device. 

B. Locational Features 

1. Locate sample plates and racks exterior to habitable Module compartments. 

2. Locate any EVA sensor cleaning units exterior to habitable Module compartments 
accessible to the EVA airlocks. 

3. Locate contaminated products or devices in special areas with waste disposal, purge, 
and vent provisions. 

C. Operational Techniques 

1. Wear protective garments, gloves, masks, etc. during sensor cleaning operations 
or when handling exposed sample plates. 

2. Perform sensor cleaning, etc. in special work areas. 


Reference 
Paragraph, 
Section 5 


5. 1.8. 1.2 

5. 1.8.2 
5.1.10 

5.1.11.2 

5.1.11.3 
5.1.12.5 


5.2.1 

5.2.1 
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Table 5-1, H-27. In-Space Experiments - Hazard/Emergency 

Analysis and Safety Criteria 


No. H-28 


hazard source 


Maintenance and Repair Operations 


Battery recharging, gas bottle recharging, component replacement, dewar replacement, and 
sensor cleaning are specific activities required in experimental operations. (See also H-5, H-6, 
H-7, H-19, H-20, H-23, H-24, H -26 for corollary or related hazard sources.) 


Experiment Groups: P-2, -3; ES-l; C/N-l; T-l, -3, -4, -5 


CAUSATIVE EVENT/FACTOR/CONDITION 


High-voltage exposure, shorts, electrolyte spills, contaminated sensor surfaces, and tank or dewar overpressure 
and leaks are principal causative factors. 


HAZARDOUS RESULT 


Hazardous results include fire, injury (including electrical shock and burns), 
chemical injury, contamination, explosion, and release of cryogenic fluids and 
gases. 


HAZARD/EMERGENCY GROUPS 


Fire, injury, explosion 
contamination 


PREVENTIVE MEASURES 


A. Design Features 

1. Incorporate automatic interlocks in recharging systems to prevent operation until 
positive engagement is ensured between recharging system and component/subsystem 
to be serviced. 

2. Configure gas bottle and battery recharging systems associated with satellite maintenance 
for remote operational control. 

3. Configure gas bottle and battery recharging systems in integral or self-contained units 
to facilitate remote storage or jettisoning. 

B . Locational Features 

1. Locate gas bottle and battery recharging equipment exterior to habitable Module 
compartments. 

2. Locate equipment requiring periodic maintenance (e.g. , animal cages) so as to 
facilitate access on the ground and in orbit. 

C. Operational Techniques 

1. Remotely control gas bottle and battery recharging operations. 

2. Employ caution and warning signals to indicate if recharging system pressure or 
temperature design levels are exceeded. 

3. Continuously monitor and control the gas bottle and battery recharging operations. 


Reference 
Paragraph, 
Section 5 


5.1.8. 1.1 

5. 1.10 
5. 1.12.5 

5.2.1 
5,2.5. 11 


5. 3. 1.3 
5.3.4. 1 
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Table 5-1, H-28. In-Space Experiments - Hazard/Emergency 

Analysis and Safety Criteria 


HAZARD SOURCE 

EVA Operations 

EVA operations are 
equipment, packages 

required in performing a number of functions: installing /removing external 
i, samples; erecting antennas, booms; operating AMU; operating MWP, 


Experiment Groups: P-1, -3; C/N-l; T-l, -3, -4; LS-6 


CAUSATIVE EVENT/FACTOR/CONDITION | 

PLSS depletion, suit puncture , broken tethers, tether entanglement, collisions, exposure to high-voltage, 
high-RF, magnetic fields, mere falling off, and propulsion "runaway" are principal causative factors. 


0 

Pallet 

m 

MSM 

m 

RAM 

a 

Orbiter 


HAZARDOUS RESULT | 


The causative factors can result in loss of EC/LS, stranding i 
physical injuries, and electric shock and burn injury. 

n EVA, 


PREVENTIVE MEASURES \ 

A. Design Features 

1. Provide extendable -aid devices to permit EVA retrieval assistance. 

2. Provide emergency EC/LS umbilicals exterior to Module for use by EVA astronaut. 

3. Configure EVA suits and/or PLSS units for simple plug-in of an emergency PLSS 
package and a voice communication unit. 

4. Provide the Module and/or Orbiter with exterior connections (near EVA airlock) for 
simple plug-in of EC/LS umbilicals and a voice communications unit. 

B. Locational Features 

1. . Locate external EC/LS umbilicals and communication plug-in unit near the EVA hatch. 

2. Locate EVA tether attach points and fixtures so aB to minimize possibility of tether 
entanglement. 

C. Operational Techniques 

1. Suspend permeating field experiments and rotating equipment operations during 
EVA operations. 

2. Conduct hazardous EVA experiment operations with at least two EVA men (one working, 
one standing -by as a safety man). 

3. Conduct normal EVA experiment operations with at least two EVA men (buddy system). 

4. Provide an additional suited crewman ready to go into EVA, in the event of an emergency 
involving men already in EVA. 

5. Avoid experiment EVA: 

a. when high-voltage RF-field, or magnetic fields are present 

b. during Experiment Module erection, retraction, docking, or undocking operations 

c. near attitude control nozzle jets 

6. Employ caution and warning signals to indicate if PLSS conditions deviate from design 
range values. 

7. Continuously monitor EVA operations and PLSS conditions during EVA operations . 
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Table 5-1, H-29 


In-Space 

Analysis 


Experiments - Hazard/Emergency 
and Safety Criteria 


No. H -29 

HAZARD SOURCE Egress Operations 

X 

Pallet 

Orbiter and Module entrance and exiting, as well as required EVA operations, present sources 
of egress operational hazards. 

X 

MSM 

X 

RAM 

Experiment Groups: All J 

X 

Orbiter 


CAUSATIVE EVENT /FAC TOR/ CONDITION | 


Malfunctioning or inoperable airlock doors alone, and in conjunction with EC/LS failures or malfunctions, 
arc the principal causative factors. 


HAZARDOUS RESULT | 

HAZARD /EMERGENCY GROUPS 

Multiple door failures (on same hatch) or multiple airlock/hatch failures can 
result in internal entrapment or EVA stranding. In combination with EC/LS 

Injury, entrapment, loss of 
EC/LS, stranded in EVA 


failures, injury and loss of EC/LS can also occur. 


PREVENTIVE MEASURES | 

A. Design Features 

1. Provide emergency EC/LS masks, umbilicals, etc. in each airlock and manned/habitable 
compartment. 


B. Locational Features 

1. Locate Experiment Modules and/or other cargo in the cargo bay to avoid blocking or 
other interference with normal egress from the Orbiter cargo bay airlock/tunnel. 

2. Locate equipment/devices attached externally to the Experiment Module in such a 
manner as to avoid interference with normal egress from airlocks or ports. 

3. Locate equipment within the Experiment Module bo as to prevent the wedging -in of 
a fully-suited astronaut. 


C. Operational Techniques 

!. Provide a second or safety crewman to stand by during airlock operations. 

2. Provide pressure suits (including PLSS units) in Experiment Module to enable EVA 
egress from Module to Orbiter airlock. 

3. Do not attempt entry into the Experiment Module until it is fully erected and secured. 

4. Have all personnel leave the Experiment Module and enter the Orbiter prior to initiating 
retraction of the Module. 

5. Employ caution and warning signals to indicate status of airlock EC/LS, pressure levels, 
and door positions. 

6. Monitor airlock and crew conditions continuously during airlock egress operations. 


Reference 
Paragraph, 
Section 5 

5. 1.8.8 

5. 2. 5. 8 

5.2.5. 9 

5.2.5.12 

5.3. 1.6. 3.1 

5.3. 1.6. 3. 3 

5.3. 1. 6. 3. 3 

5.3. 1.6. 3.4 

5.3.4. 1 

5.3.5. 1 



Table 5-1, H-30. In-Space Experiments - Hazard /Emergency 

Analysis and Safety Criteria 


HAZARD SOURCE I Erection/Retraction Operations x Pallet 

Ail Experiment Modules pose the potential requirement for erection (to perform experiments, X MSM 

undock, etc.) and retraction back into the cargo bay for return to earth. 

X RAM 

Experiment Groups: All • | Orbiter 

CAUSATIVE EVENT/FACTOR/CONDITION | ‘ 

The principal causative factors are (1) mechanism malfunction during the erection or retraction process, and 
(2) protuberances on the Experiment Module. 


H-30 1 

X 

PaUet 

X 

MSM 

X 

RAM 



Orbiter 


HAZARDOUS RESULT 


HAZARD/EMERGENCY GROUPS 


If the mechanism malfunction (either at partial or full extension) prevents retrac- Inability to reenter 
tion, the Orbiter P/L bay doors cannot be closed and the Orbiter cannot 

reenter. Similarly, protuberances may prevent P/L bay door closing. ~ 


PREVENTIVE MEASURES | 

A. Design Features 

1. Incorporate means to ensure that erection/retraction mechanisms retract from the 
extended positions. 


Reference 
Paragraph, 
Section 5 

5. 1.7.1 


c. Operational Techniques 

1. Suspend permeating field experiments and rotating equipment operations during 
erection/retraction operations. 

2. Do not erect or retract the Experiment Module until all crew members are in the Orbiter. 

3. Employ caution and warning signals to indicate position and status of erection/retraction 
system. 

4. Continuously monitor and control the erection/retraction system status and operations. 


5.3. 1.6. 3. 3 

5.3. 1.6. 3. 4 
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Table 5-1, H-31 


In -Space 
Analysis 


Experiments - Hazard/Emergency 
and Safety Criteria 


HAZARD SOURCE 

Docking/Undocking Operations 

X 

Pallet 

Free-flying RAMa, automated satellites and manned work platforms (MWPs) pose hazard sources 
with regard to requirements for do eking /undo eking with the Orbiter. 


MSM 

X 

RAM 

Experiment Groups 

A - 1 , -2, -3, -4, -5. -6; P-3; T-2, -3; LS; HEAO; EOS; P/S; C/N II | 


Orbiter 


CAUSATIVE EVENT /FACTOR /CONDITION 


The principal causative factors are (1) docking mechanism malfunctions, and (2) collisions between 
docking vehicles. 


HAZARDOUS RESULT 


Inability of a Module to release from the Orbiter, plus the inability to retract the 
Module, could result in Orbiter inability to reenter. Inability to effectively dock 
could lead to a RAM stranded in space or MWP stranded in EVA, Vehicle col- 
lisions could precipitate a wide spectrum of hazardous results (fire, explosion, injury 
contamination, etc.) 


PREVENTIVE MEAS URES 

A. Design Features 

1. Incorporate means to ensure that docking mechanisms release from the locked -up mode. 

2. Incorporate discharge devices to establish equipotential between the Orbiter and retrieved 
satellites. 

3. Configure any spacecraft and the Experiment Module for ease of jettisoning from the 
Module and/or Orbiter. 

4. Configure docking control systems of any spacecraft attempting to dock with the Module 
or Orbiter for remote operational control. 

B. Locational Features 

1. Locate the docking ports of Experiment Modules and the Orbiter so as to facilitate 
visual observations of the docking operations. 

C. Operational Techniques 

1. Suspend permeating field experiments and rotating equipment operations during 
docking/undocking operations. 

2. Employ caution and warning signals to indicate if the velocity and/or alignment of a' 
docking spacecraft relative to the Module or Orbiter deviates from design range values. 

3. Continuously monitor and control docking sensor and control systems during docking 
ope rations . 


HAZARD/EMERGENCY GROUPS 
[Fire, injury, explosion, 


contamination, inability to reenter, 
stranded (in space or EVA) 


Reference 
Paragraph, 
Section 5 


5.1.7. 1 
5. 1.8. 5 

5.1.9 

5.1.10 


5.3. 1.5. 1 

5.3.4. 1 

5.3. 5.1 
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Table 6-1. Summary of Hazard/Emergency Groups and Their Associated Potential 

Remedial Aid Requirements 
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